pantheon-systems/terminus-autopilot-plugin

Lifecycle scriptscaution

The package runs post-install and post-update scripts, creating install-time behavior that deserves more trust than a package without lifecycle hooks.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last 3 months, despite a recent repository push, which weakens evidence of ongoing development.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a package that manages deployment-related operations.

Version stabilitycaution

Version v0.1.6 is not a prerelease, but the package remains below 1.0, so compatibility guarantees are less mature than for a stable-major release.

Workflow auditcaution

All 13 analyzed action references are unpinned, and one workflow grants top-level write permissions; there are no detected untrusted checkouts, injection sinks, or audit findings to make this severe.