apache-solr-for-typo3/solr

Lifecycle scriptscaution

The package runs a post-autoload-dump install lifecycle script. This adds some installation complexity, but the single script is not by itself a maintenance or dependency-health concern.

Repo bus factorcaution

One contributor made about 77% of the 75 recent commits, creating concentration risk. However, 10 other contributors were active during the same three-month period and the repository is organization-owned, which provides some handoff capacity.

Security policycaution

The repository has no SECURITY.md or other declared security policy. This weakens vulnerability-reporting transparency, although active maintenance and Dependabot provide partial compensating evidence.

Token permissionscaution

Neither workflow declares top-level token permissions, and no workflow has read-only permissions declared at that level. This is a workflow-hygiene gap, though no top-level write permissions were found.