shopsys/frontend-api

Repo toolingcaution

Composer and Phing provide build tooling, but no security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for adopters.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.