spryker/price-product-merchant-relationship-storage

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning automation is a modest transparency gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the active organization-backed project and recent maintenance partly offset the concern.

Workflow auditcaution

All workflows were analyzed with no audit findings or untrusted checkout/script-injection paths. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.