mpietrucha/filament-essentials

Dependency profilecaution

Twenty runtime dependencies create substantial coupling and increase the maintenance surface compared with a small library. The signal provides no evidence that these dependencies are unmanaged, so this is a moderate concern rather than a severe risk.

Lifecycle scriptscaution

The package runs post-create-project-cmd and post-update-cmd scripts, giving installation and update operations extra behavior that should be understood before adoption.

Package scaffoldingcaution

The published artifact has no README, which reduces integration guidance for a library package. Missing tests and changelog files in the artifact are normal packaging practice and do not add concern.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 171 recent commits came from one contributor, so maintenance depends entirely on a single person with no demonstrated handoff capacity.