bezhansalleh/filament-google-analytics

Maintainerscaution

Only one registry account has publish access, which creates a thin publishing base, although the repository and release history show an identifiable active owner.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the single-owner maintenance risk is material.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has recently slowed despite the recent push and release history.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month; this is not inherently negative, but it provides little evidence of current community support.

Workflow auditcaution

All three workflows were analyzed, but all seven action references are unpinned and the Dependabot auto-merge workflow has a high-confidence bot-conditions finding plus top-level write permissions. There is no untrusted checkout or script injection, which limits the severity.