lipscore/ratingsreviews-magento2

Repo popularitycaution

The repository has only 2 stars and 6 forks, indicating limited public adoption; this is supporting caution rather than evidence of abandonment because other activity is present.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a modest gap in repository assurance.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The audit completed cleanly with no high-confidence findings or untrusted checkouts, but all 4 action references are unpinned and one workflow grants top-level write permissions. The job-level permissions in the other workflow provide partial compensation.