solution25/infoplus-commerce

Repo bus factorcaution

One contributor made all recent commits. The organization-owned repository provides some handoff capacity, but no second active contributor is shown to reduce concentration risk.

Repo commit activitycaution

Only one commit was made in the last three months, indicating thin recent maintenance even though the repository was pushed recently.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for an integration that handles commerce data.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted triggers or audit findings, but all three referenced actions are unpinned, so their exact revisions are not reproducibly controlled.