spryker/shopping-list-data-import

Release historycaution

The package has 9 releases since October 2018, but none in the last 12 months; the latest registry release was over a year ago. Recent repository commits provide some maintenance evidence, partly offsetting the slow release cadence.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.2.3 is not a prerelease, and recent releases contain no prerelease versions. The pre-1.0 major version still signals a less mature compatibility commitment.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. Two of four action references are unpinned, creating a limited reproducibility and supply-chain hygiene concern.