spryker-shop/shop-router

Dependency profilecaution

The package has nine runtime dependencies, mostly related Spryker components and PHP infrastructure. This is a meaningful integration surface but is coherent for a framework routing module.

Package scaffoldingcaution

A README and changelog are present and the repository uses GitHub Releases, but neither the package artifact nor repository contains tests. For a small routing module this is a real, though limited, maintenance gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although recent releases and active maintainers partly compensate.

Token permissionscaution

The one workflow lacks top-level token permissions, so its permissions are not explicitly constrained at the workflow level. No top-level write permissions were detected.