bradsearch/magento-extension

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These add installation-time behavior that deserves review, though the signal alone does not establish that the release is unsafe.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months, despite a recent push and four merged pull requests in the last month. This inconsistent and thin recent activity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For an extension handling store integrations and API credentials, that is a meaningful hygiene gap.

Security policycaution

The repository has no security policy. This weakens the project's documented process for handling vulnerabilities, although it is not evidence of a vulnerability itself.