davidbel/magento-ai-search

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor activity and registry maintainer base provide limited evidence of organizational continuity.

Repo bus factorcaution

One contributor made all 150 commits in the last three months, leaving no demonstrated handoff capacity if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a package that handles remote AI integrations, this is a meaningful repository hygiene gap.

Workflow auditcaution

Both workflows were analyzed without audit findings or unsafe-trigger sinks, and one uses read-only permissions. However, all 7 action references are unpinned and one workflow has top-level write permissions, creating avoidable build-integrity and token-scope concerns.