spryker-eco/product-management-ai

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a supply-chain hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency for vulnerability reporting and response.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous sinks or audit findings, but all four action references are unpinned, weakening build reproducibility and update control. The missing top-level permissions block is acceptable on its own because the workflow has no write permissions.