spryker/util-price

Package scaffoldingdanger

The release includes a README, changelog, and release notes, but those notes explicitly warn that version 1.0.0 is invalid and should be skipped. That warning is a severe release-fitness concern despite the otherwise adequate documentation.

Release historydanger

This package has only one release, published about seven years ago, with no releases in the last 12 months. The linked repository is active, but that activity has not produced a newer registry release.

Licensecaution

The manifest declares a proprietary license and a LICENSE file is present in both the package and repository, so this is licensed rather than an unlicensed-release gap. The proprietary terms may still limit adoption for projects requiring an open-source license.

Version stabilitycaution

Version 1.0.0 is a stable, non-prerelease version, but stability labeling does not offset the release notes' explicit warning that this particular release is invalid.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, which is a minor reproducibility weakness.