sansanlabs/laravel-inertia-permission

Dangerous workflowscaution

One workflow uses pull_request_target, which can be risky when handling untrusted pull requests, although the collected data shows no untrusted checkout or script-injection findings.

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script runs during Composer installation. This is common for framework packages but adds install-time execution that should be reviewed before adopting the dependency.

Release historycaution

This is a very young package, about 88 days old, with nine releases clustered at roughly 11-minute median intervals. That shows active initial iteration but provides little evidence of long-term stability.

Repo bus factorcaution

All 21 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.