team-nifty-gmbh/flux-license

Lifecycle scriptscaution

A post-autoload-dump script runs during Composer installation, which adds install-time behavior and should be understood by consumers, but this is not severe on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet development despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported; this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, reducing disclosure transparency for a package that manages deployment and maintenance operations.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, both action references are unpinned, so their exact code is not fixed over time.