tradetracker-com/magento2

Repo bus factorcaution

All 11 commits in the last three months came from one contributor, giving the project a thin active contributor base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of abandonment by itself.

Workflow auditcaution

All four workflows were analyzed without high-confidence findings or untrusted triggers, and none has top-level write permissions. However, all 9 action references are unpinned, leaving avoidable build-integrity and maintenance risk.