eightcedars/filament-inactivity-guard

Lifecycle scriptscaution

A post-autoload-dump script is present, adding install-time behavior that deserves some care, but this is common Composer package integration and is not severe on its own.

Release historycaution

The package has seven releases over 593 days, but only one release in the last 12 months; the latest release is recent enough to show the project is not abandoned outright.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has slowed.

Workflow auditcaution

All nine action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is workflow hygiene risk rather than a severe release risk.