spryker-feature/product-relations

Repo bus factorcaution

All three recent commits came from one active contributor, the release bot, leaving maintenance capacity concentrated and increasing continuity risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a security-process gap in the repository.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and handling.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings and no top-level write permissions, but all four action references are unpinned, weakening build reproducibility.