spryker/shopping-list-session-extension

Release historycaution

The registry shows only one release, 1.0.0, published in September 2018, with no releases in the last 12 months. Recent repository activity and a GitHub release for this version partly offset the stale registry history.

Repo toolingcaution

The project uses Composer build tooling, though no security scanning tools were detected. For this small extension, the missing scanning tooling is a minor transparency gap.

Security policycaution

No repository security policy was found. This is a modest transparency gap, not evidence that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully audited with no findings or untrusted execution paths, but two of four action references are unpinned, leaving a minor reproducibility and supply-chain hygiene gap.