bambamboole/filament-menu

Maintainerscaution

Only one registry publishing maintainer is listed, leaving limited visible publishing redundancy. The linked repository matches the same individual, so this is a capacity concern rather than evidence of a mismatch.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. This is a meaningful maintenance concern for a young package, although the repository was pushed recently and its release history is active.

Repo popularitycaution

The repository has one star and no forks or watchers, so there is little community validation. For a small, young package this is supporting caution rather than a verdict by itself.

Version stabilitycaution

Version 0.3.0 is not yet a stable major release, so compatibility may change before 1.0. It is not marked as a prerelease, which partly reduces the concern.

Workflow auditcaution

All 12 analyzed action references are unpinned, weakening build reproducibility, and a high-confidence bot-conditions finding reports spoofable actor context in a pull_request_target workflow. The audit was complete, but three workflows also grant top-level write permissions.