Looks good, 4 years later. Tax has it's own permission, so that should probably be used.
Various views provided by this project do not enforce any access control, including:
This can expose sensitive data such as revenue figures, taxes paid, etc.
Active
4.0
Code
It is used for security vulnerabilities which do not need a security advisory. For example, security issues in projects which do not have security advisory coverage, or forward-porting a change already disclosed in a security advisory. See Drupal’s security advisory policy for details. Be careful publicly disclosing security vulnerabilities! Use the “Report a security vulnerability” link in the project page’s sidebar. See how to report a security issue for details.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Looks good, 4 years later. Tax has it's own permission, so that should probably be used.