gru2007/filament-feedback-russian

Lifecycle scriptscaution

A post-autoload-dump Composer lifecycle script runs during installation-related operations. This is a supply-chain consideration, though the signal does not show that the script is malicious or unusually broad.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the thin maintenance history.

Release historycaution

The package has only two releases, both published on the same day, and no later release activity over roughly eight months. That gives little evidence of an established maintenance pattern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the repository having stopped after its initial releases. This materially raises abandonment risk.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of unsafe code.