davidhirtz/yii2-shopify

Repo bus factorcaution

Two contributors were active, but one made about 92% of recent commits, leaving maintenance heavily concentrated despite the repository remaining active.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or excessive permissions, but its one action reference is unpinned, weakening reproducibility.