digitalutsc/advanced_search_tips

Lifecycle scriptscaution

The package declares post-install and post-update Composer scripts, which add execution during dependency operations and warrant some caution compared with a package without lifecycle hooks.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. This conflicts with the recent release cadence and lowers confidence in sustained maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted-code sinks, but its only action use is unpinned. The missing top-level permissions block is acceptable on its own.