spryker-feature/service-points

Repo bus factorcaution

All three recent commits came from a single release bot, leaving no observed contributor diversity in the last three months; organizational backing partly compensates for this concentration.

Security policycaution

The repository has no security policy. This is a transparency gap, though the small repository and active organization backing reduce the abandonment concern.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted sinks, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.