jeffersongoncalves/filament-goatcounter

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script runs during Composer installation. Such scripts increase installation complexity and supply-chain exposure, although no other evidence here shows harmful behavior.

Maintainerscaution

One registry publisher is responsible for releases. A single maintainer is a limited continuity reserve, though the linked repository is also owned by that same individual and the project is newly published.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it offers less organizational continuity than an organization-backed project.

Release historycaution

The package is only 0 days old, with six releases published within roughly 13 hours. This shows active initial publishing but provides too little history to establish durable maintenance.

Repo commit activitycaution

The repository has no commits or active maintainers recorded in the last three months. Because the package is only 0 days old, this mainly means there is not yet enough history to demonstrate sustained maintenance.