oro/crm-application

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution surface for consumers even though lifecycle scripts can be normal for a PHP application.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. This is a modest transparency and assurance gap, not evidence of unsafe code.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.