spryker-feature/marketplace-merchant-contracts

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months. Organizational ownership provides some handoff capacity, but there is no observed second active contributor in this period.

Repo commit activitycaution

Only 2 commits were made in the last 3 months. That is modest activity, though it aligns with a small feature package and recent releases rather than showing a clear abandonment pattern.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although the absence alone does not show that the package is unsafe.

Workflow auditcaution

All 4 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, so this is a hygiene caution rather than a severe workflow risk.