jeffersongoncalves/editorialthemev4

Workflow auditdanger

All 6 workflows were analyzed and all 15 action references are pinned, with no untrusted checkout or script-injection findings. However, a high-confidence, high-severity bot-conditions finding affects Dependabot auto-merge, and 3 workflows grant top-level write permissions, creating a meaningful automation risk.

Dependency profilecaution

The package declares 16 runtime dependencies, including Laravel, Filament, Livewire, and several related packages. This is a broad integration surface that can increase upgrade and compatibility maintenance costs.

Lifecycle scriptscaution

The package runs four lifecycle scripts, including post-create-project-cmd and post-update-cmd. These may be expected for a Laravel starter kit, but they increase install-time behavior and deserve review before adoption.

Project backingcaution

The repository is owned by an individual account rather than an organization, so maintenance depends on a personal project owner. Active work from a second contributor provides some compensation.

Release historycaution

This is the package's first release, published 0 days ago, so there is no track record of release stability yet. Recent repository activity partly offsets the immaturity, but cannot establish long-term maintenance.