yireo/magento2-emailtester2

Maintainerscaution

Only one registry maintainer is listed (Jisse Reitsma (Yireo)). While that can be normal for small extensions, it increases bus-factor sensitivity.

Repo bus factorcaution

Commit responsibility is extremely concentrated: the top contributor accounts for ~97.8% of commits in the last 3 months, which increases the risk if that contributor becomes unavailable.

Repo package mentioncaution

The linked repository does not match the package name and does not mention the package in its README (repo_name_matches_package=false, package_name_in_readme=false), which raises ambiguity about repository ownership or packaging scope.

Repo toolingcaution

The repository uses composer for builds but there is no security scanning tool evidence collected, leaving fewer automated defenses against vulnerabilities.

Token permissionscaution

All analyzed workflows appear to lack top-level permissions configuration (5/5 without top-level permissions). This does not prove vulnerability, but it reduces assurance that least-privilege is enforced.