chanthoeun/filament-document-builder

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer and bus-factor concerns are not offset by visible organizational backing.

Repo bus factorcaution

One contributor made all 16 commits in the last three months, creating a high single-maintainer dependency. The active commit rate offsets abandonment concerns but not the lack of maintenance redundancy.

Security policycaution

The repository has no security policy. For a plugin that processes documents and exports PDFs, this weakens vulnerability-reporting transparency.

Workflow auditcaution

The workflow is fully analyzed, has no untrusted checkout or script-injection findings, and scopes permissions at job level. However, all five action references are unpinned, leaving the build exposed to upstream action changes.