spryker/shipments-backend-api

Release historycaution

The package has four releases since April 2023, but none in the last 12 months. Recent repository activity partly compensates for the quiet registry cadence, so this is a modest maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less transparent for a backend integration package.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, so workflow reproducibility has a minor hygiene gap.