ibecsystems/admin-kit-core

Lifecycle scriptscaution

The package uses a post-autoload-dump lifecycle script. This deserves awareness during installation, but the signal alone does not show an unsafe or unusually broad action.

Release historycaution

The package has 85 releases over roughly three and a half years, but none in the last 12 months; its latest registry release was about 19 months ago. This indicates a meaningful maintenance slowdown despite the strong historical release count.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Although the repository has a recent push, the measured recent activity still suggests limited current development momentum.

Security policycaution

No repository security policy was found. This is a modest transparency gap, not evidence that the package is unsafe or abandoned.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned. The audit also found one high-confidence bot-conditions issue in the Dependabot auto-merge workflow; the pull_request_target trigger has no reported untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.