spryker-feature/navigation

Repo bus factorcaution

All 3 recent commits came from one contributor, spryker-release-bot, giving that contributor a 100% share. Organization backing reduces handoff risk, but the observed recent activity is still highly concentrated.

Repo commit activitycaution

The repository recorded 3 commits in the last 3 months, showing some recent activity. The activity is limited, so it provides only moderate maintenance evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves a meaningful supply-chain hygiene gap for an actively published package.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not evidence that the package is unsafe by itself.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 4 action references are unpinned. Unpinned actions weaken build reproducibility and update control.