valantic-spryker/price-product-customer-group-data-import

Release historycaution

This is the package's only release, published in August 2023, with no releases in the following three years. That limits evidence of ongoing maintenance and compatibility work.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push in August 2023. The small, focused package reduces the severity but does not remove the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This modestly reduces transparency for a package intended to be installed as a dependency.

Workflow auditcaution

The audit completed successfully with no dangerous triggers or findings, but both analyzed action references are unpinned. This is a reproducibility and supply-chain hygiene gap, not a severe risk on its own.