spryker/price-product-merchant-relationship-gui

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. This is a modest transparency and assurance gap, not evidence of unsafe code.

Security policycaution

No repository security policy was found. That weakens the project's documented vulnerability-reporting process, although recent multi-contributor activity partly offsets the concern.

Workflow auditcaution

All workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene concern.