spryker-shop/store-widget

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; the missing scanner is a modest transparency and hygiene limitation.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling guidance undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted execution sinks. However, 2 of 4 action references are unpinned, which weakens build reproducibility, while the absence of a top-level permissions block is acceptable on its own.