spryker/product-group-storage

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Workflow auditcaution

The single workflow was fully audited with no injection or high-severity findings and no top-level write permissions. Two of four action references are unpinned, a minor reproducibility concern.