spryker/payments-rest-api

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected; this is a modest transparency and defense-in-depth gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-severity findings. However, 2 of 4 action references are unpinned, so build reproducibility has a minor hygiene gap.