spryker/product-configuration-shopping-lists-rest-api

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for users and maintainers.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene concern.