spryker/store-data-import

Release historycaution

This is the only registry release, published about 3 years ago, with no releases in the last 12 months; that limits evidence of release maintenance. Recent repository activity partly compensates but does not show that updated code is being published.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a genuine documentation gap, but it is not evidence that the package is unsafe.

Version stabilitycaution

Version 0.1.0 is not a stable major release, so compatibility expectations are limited. It is not marked as a prerelease, which avoids an additional stability concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Two of four action references are unpinned, which is a minor reproducibility concern.