retail-etl-pipeline-medallion

SUSPICIOUS. The ETL functionality is coherent, but the install provenance is inconsistent with the claimed publisher because it relies on an unrelated personal GitHub repo with no release trust chain. Credential use is proportionate and data flows remain local, so this is not confirmed malware, but users are being asked to execute unpinned third-party project code and SQL scripts with elevated local database privileges.