magna-cms/plugin-sdk

Repo bus factorcaution

All 12 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some capacity to hand maintenance off, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving automated security coverage less clear.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no reported audit findings or untrusted execution sinks. However, all three action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.