yireo/magento2-googletagmanager2-hyva-checkout

Repo bus factorcaution

All five recent commits came from one contributor, giving the project a concentrated bus factor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated oversight without indicating abandonment by itself.

Workflow auditcaution

All five workflows were analyzed and have no untrusted checkouts or script injection, but all six action references are unpinned and two workflows use unpinned or latest container images. These high-confidence reproducibility and supply-chain hygiene gaps lower confidence in the build process.