geof-dev/filament-web3-auth

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script during installation. This is common in Composer packages but adds install-time execution that deserves ordinary scrutiny.

Maintainerscaution

Only one registry account has publish access, leaving little publishing redundancy. This is a resilience concern, though it does not by itself show that project development is abandoned.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest sign that maintenance may have slowed after the latest release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving less automated oversight for a package handling authentication.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent for an authentication plugin.