spryker/symfony-scheduler

Dependency profilecaution

The package declares 15 runtime dependencies, including several Spryker and Symfony integrations. This is a meaningful dependency surface that increases upgrade and compatibility work, but it is consistent with a framework integration module rather than an unexplained excess.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. The missing scanner is a transparency gap, though it is not evidence of unsafe code by itself.

Security policycaution

No repository security policy was found. That weakens the project's documented process for reporting and handling vulnerabilities, though active releases and a backed repository provide some compensation.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but the lack of an explicit restriction leaves CI access less transparent than it should be.