p-filter

Project backingcaution

The repository is owned by an individual rather than an organization, so the project has a relatively narrow visible ownership base.

Release historycaution

The package has existed for nearly 10 years but has only six releases, with no release in the last 12 months; this is a maintenance caution, partly offset by recent repository activity.

Repo commit activitycaution

There were no commits in the measured three-month window and no active maintainers in that period, which is a maintenance caution despite the repository's recent push timestamp.

Repo toolingcaution

No build or security-scanning tools were detected; this is a modest transparency and assurance gap, though the package is small and otherwise well-scaffolded.

Workflow auditcaution

The workflow audit completed without dangerous triggers, untrusted checkouts, injection findings, or severity-bearing audit findings. Both analyzed action references are unpinned, creating a limited reproducibility and supply-chain hygiene caution.