jeffersongoncalves/editorialthemev5

Lifecycle scriptscaution

The package runs post-autoload-dump, post-create-project-cmd, post-root-package-install, and post-update-cmd scripts. These are notable install and update actions for a Laravel starter kit, but the package’s project structure makes them expected rather than inherently unhealthy.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organization-level maintenance backing shown. However, two contributors are currently active.

Release historycaution

The package is newly published, with two releases and an observed age of 0 days, so there is not yet enough history to establish long-term stability. Recent repository activity and release notes provide some compensation, but not a proven track record.

Workflow auditcaution

All six workflows were analyzed successfully, all 15 action references are pinned, and no untrusted checkout or script-injection paths were found. A high-confidence bot-conditions finding in the Dependabot auto-merge workflow and top-level write permissions in three workflows are hygiene concerns.