spryker/storage-database

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest process gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations. The active, organization-backed project provides some compensation but does not remove the gap.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings; two of four action references are unpinned, which is a minor reproducibility concern.