magemaclean/m2-core

Repo bus factorcaution

Two contributors were active in the last three months, but one made 75% of the commits. The second contributor partly offsets the concentration, but the maintenance base remains thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest repository hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, so workflow dependencies can change without a reviewed commit.