spryker-feature/marketplace-merchant-custom-prices

Repo bus factorcaution

One contributor accounts for all two recent commits, creating concentration risk. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer. Recent releases provide some compensating evidence, but direct repository activity is thin.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a maintenance and transparency gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for consumers and maintainers.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility.