spojenet/flexibee

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which add install-time behavior that consumers should understand before adoption.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented; Dependabot provides some compensation but does not replace a policy.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, but all four action references are unpinned, weakening build reproducibility and action-supply-chain control.