valantic-spryker-eco/firstspirit-bridge-api

Release historycaution

The package has 10 releases and reached a stable 1.0.9, but it has had no releases in the last 12 months; the latest release was about 21 months ago. This indicates materially slowing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. This raises abandonment risk despite the repository remaining available.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a maintenance and transparency gap, though it is not severe on its own.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers or audit findings, but both of its two action references are unpinned. The workflow also has no top-level permissions block, which is acceptable on its own.