spryker/navigations-rest-api

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The repository has no published security policy, which weakens vulnerability-reporting transparency despite the active organization-backed project.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, a minor reproducibility concern; the missing top-level permissions block is acceptable on its own.