spryker-shop/business-on-behalf-widget

Repo toolingcaution

Composer build tooling is present, but no automated security-scanning tool was detected, leaving a modest assurance gap despite the active repository.

Security policycaution

The repository has no published security policy, which leaves vulnerability-reporting expectations less transparent; this is a modest documentation gap, not evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or severity findings. Two of four action references are unpinned, a minor reproducibility concern, while the absence of a top-level permissions block is acceptable on its own.