sameday/magento-2-plugin

Licensecaution

No license declaration or license file was found in the package or repository. For a package intended to be integrated into a Magento project, this creates a real legal and transparency concern.

Repo bus factorcaution

All four recent commits came from one contributor, giving the project a single-person operational dependency. Organizational backing helps provide continuity, but no second active contributor is shown to share current maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap for a package that handles ecommerce shipping and credentials, although the configured security scanning provides some compensating evidence.

Token permissionscaution

Neither of the two workflows declares top-level token permissions. Although neither grants explicit top-level write access, the missing restrictions leave workflow permissions less explicit than preferred.