afsakar/filament-translate-action

Project backingcaution

The registry and repository are owned by the same individual, so the package has direct ownership alignment but no demonstrated organizational backing.

Release historycaution

The package has 9 releases, but none in the last 12 months and the latest registry release was about 23 months ago. This is a meaningful freshness concern, partly offset by the repository's later push activity.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which weakens current maintenance evidence. A recent repository push elsewhere in the collected data provides partial compensation.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target trigger had no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe risk.