jeffersongoncalves/nativekitv4

Dependency profilecaution

The package declares 13 runtime dependencies and 11 development dependencies, including Laravel, Filament, Livewire, and NativePHP. The profile is substantial for a starter kit and increases upgrade surface, but it is coherent with the package's stated application stack.

Lifecycle scriptscaution

Four install and update lifecycle scripts run during package operations, increasing installation complexity and the amount of code executed automatically. This is partly expected for a Laravel starter kit, so it is a modest concern rather than a severe risk.

Project backingcaution

The repository is owned by an individual user rather than an organization, so maintenance capacity rests on a small personal project rather than organizational backing.

Repo bus factorcaution

Two maintainers contributed during the last three months, with the leading contributor responsible for about 56% of commits and the second for about 44%. This is a small base but not severely concentrated.

Workflow auditcaution

All six workflows were analyzed and all 15 action references are pinned, with no untrusted checkouts or script injections. However, the audit found a high-confidence bot-conditions issue, and three workflows grant top-level write permissions, creating a meaningful workflow-hygiene concern.