visualbuilder/filament-design-system

Licensecaution

The manifest declares GPL-2.0-or-later, while artifact license files were detected as Apache-2.0 and GPL-3.0. The release is licensed, but the mismatch creates legal clarity risk.

Lifecycle scriptscaution

A post-autoload-dump script runs during installation, creating additional install-time execution surface. No provided signal shows that this script is necessary or otherwise mitigates that concern.

Release historycaution

The package made 16 releases in about 11 days, with a median interval of roughly 30 minutes. This suggests an immature release process rather than established maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, despite the package's recent release burst. That is a meaningful maintenance warning for a young package.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is a governance gap rather than evidence of abandonment by itself.