spryker-eco/vertex

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no SECURITY.md policy. That reduces vulnerability-reporting transparency, although it does not by itself indicate poor maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or audit findings, and it has no top-level write permissions. However, all 3 of 3 action references are unpinned, leaving CI exposed to upstream action changes.