solution25/partial-delivery

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, increasing installation complexity and requiring more trust in package behavior.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single active individual. Organization ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

The repository had three commits in the past three months, showing recent activity but only modest maintenance throughput.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a transparency and assurance gap for a payment-related plugin.

Security policycaution

The repository has no security policy, so users are given no documented security reporting or response process.