aoepeople/crawler

Registry deprecationdanger

Packagist marks the entire package abandoned, although the replacement points to the same package. This is a meaningful maintenance and adoption warning, but it is partly offset by recent releases and repository activity.

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer setup. This adds execution complexity for consumers, but the signal provides no evidence that the script is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization account, so the package's two registry maintainers do not provide strong evidence of organizational handoff capacity.

Workflow auditcaution

All 12 workflows were analyzed without failures, but all 53 action references are unpinned. The audit also found a high-confidence template-injection warning and a low-confidence cache-poisoning warning; without dangerous triggers, these are workflow hygiene concerns rather than standalone severe risks.