spryker/product-page-search

Repo toolingcaution

Composer build tooling is present, showing a defined build process. No security scanning tools were detected, which is a modest transparency gap but not enough to outweigh the maintenance evidence.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the active project backing and recent maintenance partly reduce the concern.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and no script injection. Two of four action references are unpinned, a minor reproducibility concern; the lack of a top-level permissions block is acceptable on its own.