magepulse/magento2-module-collector

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating a meaningful maintenance slowdown despite a recent release and push being present elsewhere in the collected signals.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures unclear for a module that sends data to external servers.

Workflow auditcaution

All 11 action references are unpinned, and the audit found a high-confidence unpinned container image plus a high-confidence archived action. No untrusted checkout or script-injection path was found, which limits the concern to workflow hygiene rather than a severe immediate risk.