rias/craft-scout

Registry deprecationdanger

Packagist marks the entire package as abandoned, with studioespresso/craft-scout listed as the replacement; this is a serious adoption risk despite the recent release and active repository.

Repo bus factorcaution

Recent activity is fully concentrated in one contributor, so maintenance depends heavily on a single person; organizational ownership provides some handoff capacity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All 5 workflows were analyzed with no dangerous findings or broad write permissions, but all 13 action references are unpinned, which weakens reproducibility and supply-chain control.