byjesper/laravel-decision-support-filament

Lifecycle scriptscaution

A post-update-cmd lifecycle script runs during dependency updates, adding some installation-time behavior that should be understood before adoption, though this alone is not severe.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little public adoption evidence. Recent commits and releases provide stronger maintenance evidence than these popularity counters.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. The active project and Dependabot provide some compensating maintenance evidence but do not replace a policy.

Token permissionscaution

The only workflow lacks top-level token permissions, so its GitHub Actions token scope is not explicitly constrained. No write permissions were detected, but explicit read-only permissions would be clearer.

Version stabilitycaution

Version 0.9.3 is not a stable major release, so compatibility may still change before 1.0. It is not marked as a prerelease, which partly offsets that concern.