spryker-feature/merchant-opening-hours

Repo bus factorcaution

All 3 recent commits came from one contributor, the spryker-release-bot. Organizational ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository recorded 3 commits in the last 3 months, showing recent activity, but that is a light maintenance pace for a dependency. The current release partly offsets this concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported. This is a modest transparency and monitoring gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no security policy file. For a maintained package this reduces published guidance for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no trigger, injection, or high-confidence audit findings, and it has no top-level write permission. However, all 4 action references are unpinned, weakening build reproducibility.