joaopaulolndev/filament-edit-profile

Lifecycle scriptscaution

The package runs a post-autoload-dump install lifecycle script. This adds some install-time behavior, but the signal provides no evidence that the script is unsafe or unusually broad.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so there is no organization-level backing to offset the concentrated contributor activity. Recent releases and a second active contributor provide partial practical support.

Repo bus factorcaution

Two contributors were active in the last three months, with the top contributor responsible for 75% of commits. The second active contributor provides some coverage, but ownership remains concentrated.

Workflow auditcaution

All three workflows were analyzed, all eight action references are pinned, and no audit findings or untrusted-checkout sinks were detected. Two workflows grant top-level write permissions, which is a mild hygiene concern but not a severe risk without an untrusted trigger.