solution25/store-credit

Repo bus factorcaution

One contributor made all recent commits, creating a narrow individual maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin activity for a package releasing frequently and leaves less evidence of ongoing development between releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap, not evidence of a defect in the release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed and has no dangerous triggers or audit findings, but all three action references are unpinned. That weakens build reproducibility and supply-chain hygiene.