novius/laravel-filament-page-manager

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which adds execution during Composer installation. No provided signal shows that this hook is harmful, so it is a limited supply-chain hygiene concern rather than a severe risk.

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the project a concentrated operational dependency. Organizational ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository had 3 commits in the last 3 months, showing continued work, but the volume is modest for a package with active releases. This is a mild maintenance concern.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, all 5 action references are pinned, and one workflow uses read-only permissions. One workflow has top-level write permissions, which is a mild excess but not dangerous without an untrusted trigger or sink.