spryker-feature/marketplace-product

Repo bus factorcaution

One contributor made all 2 recent commits, concentrating operational knowledge. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with activity from 1 maintainer. The recent release cadence partly offsets this, but current development activity is thin.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. This is a modest transparency and assurance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. For a maintained organization-owned package this weakens vulnerability-reporting transparency, although it does not indicate abandonment by itself.

Workflow auditcaution

The workflow audit completed successfully with no injection or high-severity findings, but all 4 action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own.