sansec/magento2-module-shield

Repo toolingcaution

Composer is used as the build tool, supporting a standard package workflow. No security scanning tools were detected, which leaves a modest assurance gap.

Security policycaution

The repository has no security policy. For a security-focused Magento module, the missing reporting and response guidance is a genuine transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned. Unpinned actions create a modest reproducibility and supply-chain hygiene risk.