jeffersongoncalves/filament-security-headers

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is a supply-chain surface worth noting, but the signal provides no evidence that the script is unsafe.

Maintainerscaution

One registry maintainer is responsible for publishing the package, which limits the visible publishing base; the linked repository confirms matching individual ownership but does not provide broader maintainer capacity.

Project backingcaution

The registry namespace and repository are owned by the same individual account, which is consistent ownership but does not provide organization-level backing or redundancy.

Release historycaution

The package is 0 days old, with all 3 releases published on the same day and no established release interval, so maintenance maturity is not yet demonstrated.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, but the package is only 0 days old, making this primarily an absence of demonstrated history rather than evidence of collapse.