spryker/dashboard-merchant-portal-gui

Package scaffoldingcaution

A README and changelog are present, and the repository uses GitHub Releases, which supports transparency. Tests are absent from both the artifact and repository, leaving a genuine validation gap for this application module.

Repo popularitycaution

The repository has zero stars and forks and six watchers. Low popularity is a weak caution for external visibility, but it is outweighed here by recent commits and organization backing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build structure is positive while security-process visibility remains a hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

The only workflow lacks top-level token permissions, so least-privilege intent is not explicitly declared. No workflow is shown to request top-level write permissions, limiting the severity of this gap.