hk2/search-sanitizer

Release historycaution

This package is only 60 days old and has one release, so its maintenance track record is not yet established. The recent repository activity partly offsets the limited release history.

Repo bus factorcaution

One human contributor made 90% of the recent commits, while the second contributor is a release bot; this leaves maintenance capacity highly concentrated.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a real quality gap for a module handling storefront search input.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection finding, but it grants top-level write permissions, leaves both action references unpinned, and high-confidence auditing found an ad hoc package installation.