spryker/shipment-checkout-connector

Release historycaution

The latest registry release was over three years ago, with no releases in the last 12 months. This is partly offset by recent repository activity, but the published package cadence remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkout paths. However, two of four actions are unpinned, so workflow reproducibility and action integrity have a minor hygiene gap.