spryker/sales-order-thresholds-rest-api

Release historycaution

The package has only two releases over about four years, with no releases in the last 12 months and a median interval of about 3.6 years. The repository was still pushed recently, which partly offsets the sparse registry cadence.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected. The missing scanning capability is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This does not show unsafe code, but it leaves vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or audit findings; however, two of four action references are unpinned. The absence of a top-level permissions block is acceptable on its own, so the main concern is reproducibility hygiene.