spryker/testify

Security policycaution

The repository has no published security policy. This is a transparency gap, although the active organization-backed project and clean workflow audit partly offset its practical significance.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.