spryker-feature/scheduled-prices

Repo bus factorcaution

All two recent commits came from one release bot, leaving no demonstrated human contributor activity in the measured period. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, so recent development activity is limited. The recent release cadence partly offsets this, but the low activity still lowers confidence in ongoing maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For a dependency package, that is a transparency and maintenance-process gap.

Security policycaution

The repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted execution paths, and it does not grant top-level write access. However, all four action references are unpinned, weakening build reproducibility and supply-chain control.