bluebarry/magento2-module

Release historycaution

The package is brand new, with its first release only minutes before collection and just two releases total, so there is little evidence of sustained release practice.

Repo bus factorcaution

One contributor made 100% of the 144 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a meaningful continuity risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that integrates with storefronts and external APIs.

Workflow auditcaution

All seven analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted triggers, checkout issues, or high-confidence secret findings, so this is workflow hygiene caution rather than a severe risk.