spryker-feature/merchant-custom-prices

Repo bus factorcaution

One contributor made all two commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving continuity concentrated.

Repo commit activitycaution

Only two commits were recorded in the last three months, with one active maintainer. Recent release activity offsets this somewhat, but the source shows limited ongoing development.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a maintained package this is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate that the package is unsafe.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or high-confidence audit issues. However, all four action references are unpinned, which leaves workflow dependencies exposed to upstream changes.