tapp/filament-certificate-builder

Lifecycle scriptscaution

The package runs a post-autoload-dump Composer hook. This is an install-time execution surface, but the signal provides no evidence that the hook is unsafe.

Release historycaution

The package is only 0 days old with two releases and a median interval of about 4.7 hours, so long-term maintenance is not yet demonstrated.

Workflow auditcaution

All five workflows were analyzed successfully; all 16 action references are pinned and no untrusted checkouts, script injection, or audit findings were detected. Two workflows grant top-level write permissions, a mild hygiene concern without an untrusted sink.