doublesecretagency/craft-googlemaps

Repo bus factorcaution

All three recent commits came from one contributor, concentrating short-term maintenance capacity and increasing continuity risk if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving automated security coverage unclear.

Security policycaution

The repository has no security policy, which makes the process for reporting and handling vulnerabilities less transparent.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings and scopes permissions at job level, but its one action use is unpinned, leaving dependency resolution less reproducible.