laraxot/module_tenant_fila3

Lifecycle scriptscaution

The package runs post-autoload-dump and post-update-cmd scripts. Install-time scripts add operational and supply-chain surface, but this signal alone does not show unsafe behavior.

Release historycaution

This is the package's only release, published 1019 days ago, with no releases in the last 12 months. That limited history and long gap materially raise maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently according to the archive-status signal, the measured recent activity still indicates uncertain ongoing maintenance.

Version stabilitycaution

Version 0.0.0 is not a stable major release, which signals an immature release line. The repository's tests and changelog provide some compensating project structure but do not establish release maturity.

Workflow auditcaution

All 18 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, or high-severity findings; two workflows have top-level write permissions, but no dangerous trigger or sink was reported.