onetracepro/onetrace-bitrix

Release historycaution

The package is only 3 days old with 4 releases, so it has little evidence of long-term stability despite its rapid initial activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed, but all 8 action references are unpinned and it grants top-level write permissions. The low-confidence cache-poisoning finding is hygiene evidence only, not a severe risk by itself.