helsingborg-stad/api-schools-manager

Lifecycle scriptscaution

A post-update-cmd script runs during Composer updates, which adds some installation complexity but is not by itself evidence of poor package health.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent maintenance slowdown.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were closed or merged in the last month, offering little evidence of active maintenance.

Security policycaution

The repository has no SECURITY.md or other declared security policy, reducing transparency for vulnerability reporting.

Workflow auditcaution

All three workflows were analyzed successfully, but the release workflow checks out untrusted code and all 8 action references are unpinned. No high-confidence audit findings or broad top-level write permissions were reported.