jeffersongoncalves/filament-metrics-posthog

Lifecycle scriptscaution

The package uses a post-autoload-dump install lifecycle script. Composer packages commonly use this hook for package setup, but it adds install-time behavior that should be understood before adoption.

Release historycaution

The package is only 2 days old and has already published 6 releases, with a median interval of 0 days. This shows active initial publishing but provides too little history to establish sustained maintenance.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the package itself is only 2 days old and was pushed recently. This limits evidence of long-term maintenance without proving abandonment.

Workflow auditcaution

All 5 workflows were analyzed successfully, all 12 action references are pinned, and no untrusted checkout or script-injection sink was found. However, the audit reports a high-confidence bot-conditions finding in dependabot-auto-merge.yml and two workflows with top-level write permissions, creating a workflow-hygiene caution.