moataz-01/filament-notification-sound

Dangerous workflowscaution

One of seven workflows uses pull_request_target, creating additional workflow-risk exposure, but no untrusted checkout or script-injection patterns were detected.

Lifecycle scriptscaution

A post-autoload-dump install-time script is present, which adds some execution surface during Composer installation, though this is not by itself evidence of poor package health.

Project backingcaution

The package and repository are owned by the same individual account, so the project has direct ownership alignment but lacks organizational backing or handoff capacity.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

The repository had two commits in the last three months, showing some recent maintenance but a relatively low pace for a package with ongoing releases.