better-futures-studio/filament-local-logins

Repo bus factorcaution

One contributor made all 5 commits in the last 3 months, creating a concentrated maintenance path. Organization backing provides some handoff capacity, which keeps this from being a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but the project does use Dependabot for security scanning.

Workflow auditcaution

All 12 action references are unpinned, three workflows grant top-level write permissions, and the audit reports high-confidence bot-condition and template-injection findings. No untrusted checkout or script-injection sink was found, so these are meaningful hygiene concerns rather than a severe standalone risk.