littleredbutton/bigbluebutton-api-php

Lifecycle scriptscaution

The package defines post-install and post-update scripts, which add execution during dependency operations and therefore deserve review before adoption.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent.

Token permissionscaution

The CI workflow does not declare top-level token permissions. It has no observed write permissions, but explicit least-privilege configuration would provide stronger workflow hygiene.