atendwa/filament-workspace-avatars

Lifecycle scriptscaution

A post-autoload-dump script runs during installation, adding execution during dependency setup. No provided signal shows that this is harmful, so it is a limited transparency and review concern rather than a severe risk.

Maintainerscaution

Only one registry maintainer is listed, and the project is backed by an individual account rather than an organization. This leaves a thin apparent maintainer base if the owner becomes unavailable.

Project backingcaution

The repository and registry are owned by the same individual account, so the package does not appear to be attached to a broader organization-backed maintenance team.

Release historycaution

This is the only release, published about 1 year and 3 months ago, with no releases in the last 12 months. That materially limits evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. That weakens evidence of ongoing maintenance, although the repository is not archived.