grafton-digital/laravel-filament-starter-kit

Dangerous workflowscaution

No GitHub Actions workflows were present to analyze, so no dangerous workflow patterns were observed. This also means CI-based assurance cannot be established from this signal.

Lifecycle scriptscaution

The package uses post-autoload-dump, post-create-project-cmd, post-root-package-install, and post-update-cmd scripts. Such scripts can be expected for a Laravel project template, but they increase install-time behavior that consumers should review.

Release historycaution

The package is only 91 days old and has three releases, with a median interval of about 46 days. This provides some release continuity but limited evidence of long-term maintenance maturity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence and limits external validation, but popularity alone is not decisive for an organization-backed starter kit.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the release is unsafe.