wheelpros/fitment-platform-api

Dependency profilecaution

The release declares 80 runtime dependencies and 11 development dependencies, creating a substantial dependency surface for a full e-commerce platform. This is understandable for the package's scope but increases operational complexity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is not transparent. The Magento artifact structure and README identify the contents as Magento, but they do not explain the wheelpros package identity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanner is a modest transparency gap rather than evidence of unsafe maintenance.

Version stabilitycaution

This release is explicitly a prerelease, and 95% of recent releases are prereleases. That lowers confidence in API stability even though the major version is established.

Workflow auditcaution

The single workflow was fully audited with no findings, no untrusted checkouts, and job-level permission scoping. However, 3 of 4 action references are unpinned, leaving a minor reproducibility and action-integrity gap.