jeffersongoncalves/filament-tawk-to

Lifecycle scriptscaution

The package uses a post-autoload-dump lifecycle script. This is a limited install-time complexity concern, but the provided signals do not show that it performs unsafe actions.

Project backingcaution

The repository is owned by the same individual namespace as the package, but the owner type is User rather than an organization; this provides consistent ownership without evidence of broader project backing.

Release historycaution

The package is less than one day old with six releases in that period, so there is not enough history to establish sustained maintenance or release reliability.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers over the last three months. Because the project is less than one day old, this is mainly missing maturity evidence rather than proof of abandonment.

Workflow auditcaution

All five workflows were analyzed, all 12 action references are pinned, and no untrusted checkout or script-injection paths were found. A high-confidence bot-conditions finding in the Dependabot auto-merge workflow is a workflow-hygiene concern, but it is not independently severe enough to make the package unfit.