spryker-feature/measurement-units

Repo bus factorcaution

One contributor, the release bot, made all 4 recent commits. Organizational ownership provides some handoff capacity, but no second active contributor is shown, leaving maintenance continuity concentrated.

Repo commit activitycaution

The repository recorded 4 commits in the last 3 months, showing recent activity, but the volume is modest and concentrated in a single maintainer.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, though the package's recent release activity and clean workflow audit provide some compensating evidence.

Workflow auditcaution

The single workflow was fully analyzed with no injection sinks or audit findings, and it has no broad top-level write permissions. However, all 4 referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.