spryker-feature/shipment-cart

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which shows recent activity but a relatively thin maintenance pace for a package consumers may depend on.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is reported. That leaves a maintenance and transparency gap, though it is not evidence of a harmful release.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting and handling security issues.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 of 4 action references are unpinned, which weakens build reproducibility.