lindemannrock/craft-docs-manager

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These are install-time execution points and add supply-chain exposure, although no other provided signal shows that they are harmful.

Release historycaution

The package is young, with four releases since May 21, 2026 and a median interval of about 11 days. That shows initial activity but not yet a long maintenance record.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the past three months. Despite a later push timestamp and recent release history, this leaves a meaningful concern about sustained maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, and the package is young, but there is little external adoption evidence.

Workflow auditcaution

All three workflows were analyzed without audit findings or untrusted checkout and script-injection patterns. However, all six action references are unpinned, and two workflows grant top-level write permissions, creating avoidable workflow maintenance and token-scope risk.