blemli/websearch-for-filament

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds execution during installation and warrants review, but a single Composer lifecycle script is not by itself evidence that the package is unsafe to depend on.

Maintainerscaution

Only one registry publishing account is listed, limiting visible publishing redundancy. However, the repository is organization-owned, making a short registry maintainer list normal publishing hygiene rather than strong abandonment evidence.

Release historycaution

The package is brand new, with two releases over roughly 22 minutes and no longer-term release record. This limits evidence of sustained maintenance, though the rapid initial releases are not themselves a severe concern.

Repo commit activitycaution

There have been no commits from active maintainers in the last three months, so sustained maintenance cannot yet be demonstrated. Because the package itself is only hours old, this is an evidence gap rather than proof of abandonment.

Token permissionscaution

All workflows declare permissions, and three are read-only, but two workflows request top-level write access. This is a modest CI privilege concern without the more severe workflow hazards identified elsewhere.