spryker/acl-entity

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a minor repository-hygiene gap, not evidence of abandonment by itself.

Security policycaution

No repository security policy was found. This weakens the documented vulnerability-reporting path, although the active organization-backed project and recent maintenance partly compensate.

Workflow auditcaution

The single workflow was fully audited with no findings, no untrusted checkouts, and no script-injection risks; two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap. No top-level permissions block is acceptable here because the workflow has no write permissions or untrusted trigger.