magebitcom/magento2-mcp-catalog-tools

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package that performs catalog writes.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or excessive token permissions. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.