spryker-shop/customer-page-extension

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a minor transparency and maintenance gap, not evidence that the release is unsafe.

Security policycaution

The repository has no SECURITY.md or other detected security policy. That leaves vulnerability-reporting expectations unclear, though active organizational maintenance partly offsets the gap.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-confidence findings, no untrusted checkout, and no script injection. However, two of four action references are unpinned, so workflow reproducibility has a minor hygiene weakness.