onclicksolucions/filament-onclick

Lifecycle scriptscaution

A post-autoload-dump install-time script runs during Composer installation, adding execution surface and a modest dependency-installation concern.

Release historycaution

The package has existed for 852 days with nine releases, but only one release in the last 12 months, indicating limited recent delivery activity despite the new 1.0.8 release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving automated security hygiene less visible.

Workflow auditcaution

All five analyzed workflow actions are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkouts, script injection, or higher-confidence dangerous findings, so this is a hygiene concern rather than a severe risk.