turbine-kreuzberg/spryker-deploy-tasks

Release historycaution

The package has 9 releases over roughly three years, but none in the last 12 months despite a latest release more than a year ago. This indicates a meaningful slowdown, although the prior median interval of about 49 days shows an established release history.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last three months. That is a concrete maintenance warning, even though the repository is not archived and has a longer release history.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected. The missing scanning layer is a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository. For a package used in deployment tooling, this makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The sole workflow was fully analyzed with no high-confidence audit findings or untrusted triggers, but both of its two action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while fully unpinned actions leave a build-integrity hygiene gap.