spryker-feature/cms

Dependency profilecaution

The package declares 46 runtime dependencies, creating substantial transitive maintenance and upgrade surface for a feature package.

Repo bus factorcaution

All four recent commits came from one contributor, the release bot. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected in the repository.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.