tinect/matomo

Repo bus factorcaution

One contributor made 100% of the six recent commits, leaving the project dependent on a single person for current maintenance. The recent release cadence partly offsets this, but does not remove the continuity risk.

Repo commit activitycaution

The repository had 6 commits in the last 3 months, showing recent work, but all of that activity came from one active maintainer. The activity is healthy but concentrated.

Security policycaution

The repository has no security policy. For a plugin that handles storefront tracking and server-side proxying, this reduces transparency around vulnerability reporting.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, its one action reference is unpinned, which leaves build inputs less reproducible.