amzad/filament-translatable-group

Workflow auditdanger

The audit completed all five workflows and found a high-confidence bot-conditions issue, three workflows with broad top-level write permissions, and all 12 action references unpinned. The pull_request_target workflow has no untrusted checkout or script-injection finding, limiting the severity.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds some installation complexity, but the signal provides no evidence that the script is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single maintainer account leaves limited visible continuity if that person stops maintaining the project.

Release historycaution

This is a young package with one release over 83 days and no established release cadence, so long-term maintenance is not yet demonstrated.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Because the package is only 83 days old, this is concerning but not conclusive abandonment evidence.