jlevers/selling-partner-api

Lifecycle scriptscaution

The package defines post-install-cmd and post-update-cmd scripts, adding install-time behavior that developers must review before adoption.

Maintainerscaution

Only one registry account has publish access, creating some publishing concentration risk. Repository activity from three recent contributors provides compensating maintenance evidence, but not redundancy for registry operations.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no organizational handoff evidence; nevertheless, recent activity involves three contributors.

Repo issue activitycaution

There were no new or closed issues in the last month, although one pull request was merged and only 39 issues remain open; the lack of recent issue movement is a modest maintenance-hygiene concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.