jeffersongoncalves/filament-saml2

Lifecycle scriptscaution

The package declares a post-autoload-dump install lifecycle script. This adds install-time behavior and some supply-chain exposure, although the signal does not show a clearly harmful script.

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for continuity, though the matching repository owner shows the package is maintained by the same individual rather than an unexplained publisher.

Project backingcaution

The registry namespace and repository are owned by the same individual account. This establishes ownership alignment, but not organizational redundancy or a broader maintenance team.

Release historycaution

The package is effectively new: it is 0 days old and has only 3 releases, all published within about 1 minute. That provides too little history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last 3 months. Because the package is newly published, this is not proof of abandonment, but it provides no demonstrated ongoing maintenance yet.