spryker/security-gui

Dependency profilecaution

Twenty runtime dependencies create a meaningful upgrade and compatibility surface for this security-related module, though the profile is coherent with a feature-rich Spryker UI component.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The absence of automated security scanning is a transparency and assurance gap for a security-related module.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a genuine transparency gap for a module handling authentication-related UI.

Token permissionscaution

The one workflow has no top-level token permissions declaration. Although no write permissions were observed, explicitly restricting workflow permissions would provide stronger CI supply-chain hygiene.