james-and-james-fulfilment/selling-partner-api

Lifecycle scriptscaution

Composer post-install and post-update scripts run during dependency operations, increasing installation and update complexity compared with a package without lifecycle hooks.

Maintainerscaution

Only one registry account has publish access, which is a concentration risk, but the organization-owned repository provides some compensating project backing.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern for an API client.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the project process.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.