jeffersongoncalves/filament-discord-logger

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script. This is a supply-chain consideration because installation executes package code, although the signal does not show that the script is harmful.

Release historycaution

The package is only 1 day old with 6 releases, all within that initial period. The rapid release burst shows active publishing but provides too little history to establish durable maintenance.

Repo commit activitycaution

The repository shows 0 commits and 0 active maintainers in the last 3 months. Because the package is only 1 day old, this is partly explained by its newness, but there is not yet evidence of an established maintenance cadence.

Workflow auditcaution

All 5 workflows were analyzed with no untrusted checkouts, script injection, or unpinned actions, but the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow and two workflows with top-level write permissions.