octoper/statamic-blade-components

Lifecycle scriptscaution

The package declares a post-autoload-dump install-time script. Lifecycle execution expands installation complexity and warrants inspection, but the signal provides no evidence that this script is harmful.

Release historycaution

The latest registry release was over four years ago, with no releases in the last 12 months and only four releases overall. This weakens confidence that compatibility issues will be addressed promptly.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository was pushed more recently than the release, but current maintenance still appears inactive.

Security policycaution

The linked repository has no published security policy. This is a transparency gap for a package that integrates into application templates, although it is not evidence of a security defect by itself.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves avoidable build-integrity risk despite otherwise clean workflow behavior.