lqt/loqate-integration

Repo bus factorcaution

One contributor made 53 of 54 recent commits, leaving nearly all observed activity concentrated in one person. Organization backing partly reduces handoff risk, but the concentration remains a maintenance caution.

Repo toolingcaution

The project uses Composer but reports no security scanning tools. For an integration package, the absence of automated security scanning is a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy. This makes vulnerability reporting and response expectations less clear for adopters.

Workflow auditcaution

All 15 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, excessive top-level write permissions, or other concrete findings, so this remains a hygiene caution rather than a severe risk.