adaa/shipping-filament

Release historycaution

The package is only 0 days old, with four releases in roughly 1 day, so it has not yet demonstrated sustained maintenance or release stability.

Repo commit activitycaution

There were zero commits and zero active maintainers in the previous 3 months, but this window overlaps the package's launch, so it is evidence of limited history rather than established abandonment.

Security policycaution

No security policy is present, leaving vulnerability-reporting expectations unclear for a package that handles shipping credentials.

Version stabilitycaution

Version v0.3.0 is not a stable major release, which is normal for an early package but signals possible API change risk for adopters.

Workflow auditcaution

Both workflows were analyzed with no audit findings or unsafe checkout and injection patterns, but all four action uses are unpinned and one workflow grants top-level write access, weakening build reproducibility and least privilege.