valantic-spryker/customer-group

Licensecaution

No declared license, license file, or repository license file was detected. That creates a legal transparency gap for adoption.

Release historycaution

The package has had only two releases, both in August 2023, with no release in more than three years. This is a meaningful maintenance concern, though the repository is not archived and the latest version is stable.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. This raises abandonment risk, although the project remains available and unarchived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHP package this is a modest security-process gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, but it is not by itself evidence that the package is unsafe.