bbs-lab/filament-force-two-factor

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds execution during installation and deserves review, though this alone is not evidence of an unsafe dependency.

Release historycaution

Only two releases exist and the package is less than one day old, so long-term maintenance cannot yet be demonstrated. The recent release activity is encouraging but does not establish durability.

Repo commit activitycaution

There are no commits or active maintainers recorded over the last three months, but the repository and release were created very recently, so this is limited history rather than established abandonment.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted triggers, but all eight action references are unpinned, leaving avoidable dependency-drift risk in CI.