standardwebhooks

Lifecycle scriptscaution

The package uses a prepare install-time script, which adds build or installation behavior that dependents should account for, though this is not severe by itself.

Release historycaution

Only three releases have been published over 927 days, with a median interval of about 454 days; two releases in the last 12 months and active repository work partly compensate for the slow registry cadence.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Token permissionscaution

Ten workflows omit top-level permissions and eight declare top-level write permissions, with no read-only workflows; this is weaker-than-ideal least-privilege configuration.