spryker/search-extension

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tool was detected. The missing scanner is a modest process gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, although recent multi-contributor activity partly offsets the concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, leaving a minor build-reproducibility and workflow supply-chain gap.