humanmade/enhanced-search

Registry deprecationdanger

Packagist marks the entire package abandoned and names altis/enhanced-search as its replacement. That is a substantial adoption risk even though this release is current.

Dangerous workflowscaution

One workflow uses pull_request_target, which warrants workflow review, but there are no detected untrusted checkouts or script-injection patterns.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is outweighed by the active organization-backed project.

Token permissionscaution

Three workflows omit top-level permissions and one workflow grants top-level write access, reducing workflow permission hygiene and increasing operational risk.