novius/laravel-filament-news

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer setup. This is not inherently unsafe, but it adds execution during installation and warrants attention.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating very light recent development. The recent release provides some compensating evidence, but ongoing maintenance capacity remains uncertain.

Security policycaution

The repository has no security policy, reducing transparency about how dependency issues and vulnerability reports should be handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all six action references are unpinned. That leaves the build exposed to changing action revisions.