syriable/filament-icon-hub

Lifecycle scriptscaution

A post-autoload-dump install-time script is present. This is worth noting because it adds installation behavior, but the signal does not show that the script is unsafe or unusually broad.

Release historycaution

The package is only 0 days old with two releases, so there is little evidence of sustained maintenance or long-term stability. The rapid second release and repository activity provide some early support but do not establish a track record.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, despite the recent release and merged pull requests. Because the project is brand new, this is concerning evidence of limited history rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest repository hygiene gap for a package that handles application integrations.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations, though it does not by itself show that the package is unsafe.