spryker/merchant-opening-hours-data-import

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a minor repository hygiene gap, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented. This is a transparency gap, although active project backing partly reduces abandonment concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings; two of four action references are unpinned, which is a minor reproducibility gap rather than a severe workflow risk.