spryker/store

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing security tooling is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

No repository security policy was found. For a maintained framework module this reduces the clarity of vulnerability reporting, though it does not indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, 2 of 4 action references are unpinned, leaving a modest supply-chain reproducibility gap.