plugin/owc-mijn-services

Lifecycle scriptscaution

Composer post-install and post-update scripts run during dependency operations, adding execution and supply-chain exposure for consumers even though this is common packaging practice.

Repo bus factorcaution

One contributor made 58 of 63 recent commits, or about 92%, despite two additional active contributors. Organizational backing partly compensates, but the concentration remains a real continuity risk.

Workflow auditcaution

Both workflows were fully audited with no detected high-confidence findings or untrusted checkout paths. However, the sole action use is unpinned and one workflow grants top-level write permission, creating moderate workflow hygiene concerns.