wyrihaximus/react-psr-3-loggly

Lifecycle scriptscaution

The package runs post-install and post-update commands, creating additional execution during dependency operations and warranting review of those scripts.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a maintenance concern despite the recent push and pull-request activity elsewhere.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest assurance gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

Both workflows use top-level write permissions and all two analyzed action references are unpinned, weakening build reproducibility and widening token access. The audit found no untrusted checkout, script injection, or high-confidence dangerous workflow finding, so this remains a hygiene concern rather than a severe risk.