spryker-feature/tax

Repo bus factorcaution

One contributor, the release bot, made all four recent commits, so direct recent contributor diversity is low. Organization ownership provides some ability to hand maintenance off, making this a caution rather than a severe abandonment signal.

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. This limits published guidance for reporting and handling vulnerabilities, but it does not by itself indicate that maintenance has stopped.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, leaving them exposed to upstream changes.