pjedesigns/filament-meta-lexical-editor

Lifecycle scriptscaution

A post-autoload-dump script is present, which is an install-time execution point and deserves review, but the signal does not show a dangerous script or otherwise establish severe risk.

Project backingcaution

The registry namespace and repository owner match, with a user-owned project rather than organizational backing. This is consistent and transparent, though it provides a thinner continuity cushion than an organization-backed project.

Repo commit activitycaution

The repository has had no commits and no active maintainers in the last three months; combined with the latest release being about five months ago, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For a package containing substantial JavaScript and upload-related functionality, that is a security-hygiene gap.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.