x-multibyte/blatui-admin

Lifecycle scriptscaution

The package runs a post-autoload-dump lifecycle script during Composer installation. This is a supply-chain surface that merits review, although the signal does not show malicious behavior or an unsafe script.

Release historycaution

The package is only 0 days old with two releases, so there is not yet enough history to demonstrate sustained maintenance or release stability.

Repo bus factorcaution

All 44 recent commits came from one contributor, leaving maintenance highly dependent on a single person and increasing abandonment risk.

Version stabilitycaution

Version v0.0.2 is below a stable major release, indicating an early-stage API and a higher likelihood of breaking changes.

Workflow auditcaution

All two workflows were analyzed with no audit findings and all five action references pinned, but one workflow grants top-level write permissions. No untrusted trigger or checkout sink was found to amplify that concern.