ralphjsmit/laravel-filament-seo

Dangerous workflowscaution

One workflow uses pull_request_target, which can require elevated trust when handling untrusted pull requests, but no untrusted checkout or script-injection patterns were detected.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the project has a relatively narrow visible ownership base; the package nevertheless has a matching repository and substantial release history.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance-continuity concern. The recent release and repository push partially offset this, but they do not demonstrate sustained ongoing development.

Token permissionscaution

Two workflows lack top-level permissions and one workflow has top-level write permissions, leaving room for least-privilege improvement in CI configuration.