customgento/module-default-store-code-remover-m2

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling was detected. This is a hygiene gap, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling guidance unclear.

Workflow auditcaution

All 4 workflows were analyzed with no detected dangerous sinks or audit findings, and none has top-level write permissions. However, all 4 of 4 action references are unpinned, weakening build reproducibility and supply-chain protection.