pjedesigns/filament-nested-set-table

Lifecycle scriptscaution

The package runs a post-autoload-dump script, which is a normal Composer lifecycle hook but adds install-time behavior that should be understood by consumers.

Project backingcaution

The package and repository are owned by the same individual account, so the project has direct ownership alignment but no organizational backing shown by the provided evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are less transparent.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all five action references are unpinned. That weakens build reproducibility and exposes the workflow to action-reference changes.