abdelhamiderrahmouni/filament-shield

Release historydanger

The package is 457 days old but has only four releases, all concentrated around its initial publication, with no releases in the last 12 months. This is strong evidence of abandonment risk for a maintained library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the absence of recent registry releases. No provided maintenance signal compensates for this inactivity.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so the workflow risk is caution rather than standalone danger.