spryker/product-management-extension

Security policycaution

The repository has no documented security policy. This is a transparency gap, though it is partly offset by the active organization-backed project and clean workflow audit.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-severity findings and no unsafe trigger or untrusted checkout detected. However, 2 of 4 action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.