padosoft/product-image-discovery-admin

Lifecycle scriptscaution

The package defines post-autoload-dump and post-create-project-cmd scripts, so installation performs extra project actions beyond dependency extraction.

Release historycaution

The package is young at about four and a half months, with three releases all published on the same day, so long-term release consistency is not yet established.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable assurance gap for a package with application code.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings, but all five action references are unpinned, weakening build reproducibility and update control.