joaopaulolndev/filament-edit-env

Lifecycle scriptscaution

The package declares a post-autoload-dump install-time script. This is a supply-chain and installation-surface consideration, although the provided signal does not show that the script is harmful.

Release historycaution

The package is 816 days old with four releases and one release in the last 12 months, indicating a modest release cadence but not abandonment because v3.0.0 is recent.

Workflow auditcaution

All three workflows were analyzed successfully; all eight action references are pinned and no audited findings or untrusted checkout or script-injection paths were reported. Two workflows grant top-level write permissions, a mild hygiene concern without an untrusted trigger or sink.