achyutn/filament-kit

Release historycaution

Only two releases were published, both within about three days, and none appeared in the last 12 months despite the package being about 13 months old. This suggests limited release maturity and raises abandonment concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, indicating that maintenance has gone quiet. The repository was pushed more recently, but the provided activity window still shows no ongoing development.

Security policycaution

No security policy was found in the linked repository. For a starter kit that includes application code and install-time automation, this reduces transparency about vulnerability reporting.

Workflow auditcaution

The single workflow uses a pull_request_target trigger with an untrusted checkout, which creates a workflow-hygiene concern, and all 3 of 3 action references are unpinned. Read-only permissions and a complete audit reduce the severity, so this is not a severe standalone risk.