spryker/store-gui

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. For a package with active CI this is a minor transparency and hygiene gap, not evidence of abandonment.

Security policycaution

No repository security policy was found. This modestly reduces disclosure transparency, although active maintenance and CI provide compensating project evidence.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence security findings and no top-level write permissions. However, two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene concern.