lindemannrock/craft-redirect-manager

Lifecycle scriptscaution

Composer post-install and post-update scripts run during dependency operations, adding install-time behavior that developers should understand before adopting the package.

Repo bus factorcaution

All 100 recent commits came from one contributor, creating a meaningful continuity risk despite the project's active development.

Repo toolingcaution

The repository uses Composer build tooling and has a security policy, but no security scanning tools were detected; the policy helps transparency while automated coverage is limited.

Workflow auditcaution

The audit completed all three workflows with no high-confidence findings or untrusted-trigger sinks, but all six action references are unpinned and two workflows grant top-level write permissions, leaving avoidable workflow supply-chain and token-scope exposure.