spryker/twig

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a minor transparency and assurance gap for an organization-backed project.

Security policycaution

The repository has no documented security policy, which weakens vulnerability-reporting transparency, though active maintenance and organization backing partly compensate.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, two of four action references are unpinned, creating a minor reproducibility and supply-chain hygiene gap.