yireo/magento2-msp-dev-tools-fixes

Release historycaution

The package has existed for about 5 years 6 months and made one release in the last 12 months, but its median release interval is about 2 years 4 months, indicating a slow cadence.

Repo bus factorcaution

All 5 recent commits came from one contributor, leaving a thin active maintainer base. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo issue activitycaution

There is one open issue but no issue or pull-request activity in the last month; this is a minor transparency concern, not evidence of abandonment by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured, leaving a modest supply-chain hygiene gap.

Token permissionscaution

All 5 workflows omit top-level token permissions, so their effective permissions are not explicitly minimized in the workflow definitions. None declares top-level write access, limiting the concern.