magepsycho/magento2-salesordergrid

Project backingcaution

The repository is owned by a GitHub user rather than an organization, so the single-contributor maintenance pattern has no visible organizational backing to offset it.

Release historycaution

This is a young package, released only once 38 days ago, so there is limited evidence of long-term maintenance and release reliability.

Repo bus factorcaution

One contributor made all five commits in the past three months, giving the project a bus factor of one and creating a real continuity risk for a user-owned project.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools are present. This is a modest transparency and maintenance gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for a package that adds administrative Magento functionality.