lindemannrock/craft-smartlink-manager

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency installation or updates, adding execution surface that consumers should understand before adoption.

Repo bus factorcaution

All 47 recent commits came from one contributor, giving the project a concentrated maintenance base. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is used, but no security-scanning tools were detected, leaving a modest gap in automated security hygiene.

Workflow auditcaution

All three workflows were analyzed with no injection or high-severity findings, but all six action references are unpinned and two workflows grant top-level write permissions. These are workflow hygiene and token-scope concerns, not evidence of an active exploit.