sixteenhands/filament-dynamic-filter

Dangerous workflowscaution

One workflow uses pull_request_target for Dependabot automation. No untrusted checkout or script-injection pattern was detected, which limits the concern, but this trigger still warrants review because it can run with elevated repository context.

Lifecycle scriptscaution

The package declares a post-autoload-dump install-time script. This is a real execution surface during Composer installation, though the signal does not show a dangerous script or an unusual number of lifecycle hooks.

Repo bus factorcaution

All four recent commits came from one contributor, creating a meaningful single-person maintenance dependency. Organization ownership provides some ability to hand work off, but no second active contributor is shown.

Repo commit activitycaution

There were four commits in the last three months, so activity has not stopped, but the pace is modest for a project whose releases are frequent.

Repo issue activitycaution

There are no open issues and four open pull requests, with one new pull request in the last month. The lack of merged pull requests recently leaves some uncertainty about review and maintenance throughput.