spryker-feature/merchant-product-restrictions

Repo bus factorcaution

One contributor, spryker-release-bot, made all 2 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so recent development activity is light; the recent release history partly offsets, but does not remove, that concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest verification gap for a production dependency.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.