leek/filament-dicebear

Lifecycle scriptscaution

A post-autoload-dump install-time script adds some execution surface during installation, although this is a single declared Composer lifecycle hook and no corroborating workflow risk is present.

Maintainerscaution

One registry publishing maintainer creates some publishing concentration, but repository activity shows two active contributors, which provides limited compensation.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no organizational handoff buffer; current two-contributor activity partly offsets that limitation.

Repo bus factorcaution

Two contributors were active in the last three months, with the leading contributor responsible for two-thirds of commits; the concentration is noticeable but not a single-contributor failure point.