damconsultants/macfarlane

Repo bus factorcaution

All 6 commits in the last 3 months came from one contributor, leaving maintenance dependent on a single active individual. The repository is user-owned rather than organization-owned, so there is no provided backing signal to compensate for this concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap for a Magento extension with substantial application code.

Security policycaution

The repository has no security policy. That weakens the project's disclosure and maintenance transparency, though it is not severe enough to outweigh the recent activity and releases.

Workflow auditcaution

No GitHub Actions workflows were present to audit, so the audit found no workflow risks but also provides no evidence of automated build or security controls. This is a limited hygiene gap rather than a severe concern.