lindemannrock/craft-search-manager

Lifecycle scriptscaution

The package runs post-install-cmd and post-update-cmd scripts, which increases installation-time behavior and review requirements compared with a package without lifecycle hooks.

Repo bus factorcaution

All 257 recent commits came from one contributor, leaving maintenance highly dependent on a single person; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest gap in automated security hygiene.

Workflow auditcaution

All three workflows were analyzed without detected audit findings or untrusted checkout and script-injection paths, but all 6 action references are unpinned and two workflows grant top-level write permissions, creating avoidable workflow hygiene and token-scope risk.