compwright/philter

Release historycaution

The package is only 40 days old with two releases, both published on the same day, so its maintenance record is too short to establish long-term reliability.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Because the package is very new, this is an early maintenance concern rather than evidence of abandonment by itself.

Repo toolingcaution

The project uses Composer and Make, showing a defined build process, but no security-scanning tool was detected. This leaves security-quality checks less transparent.

Workflow auditcaution

Both workflows were analyzed successfully and no audit findings or untrusted checkouts were reported, but all three action references are unpinned and one workflow grants top-level write permissions. That weakens build reproducibility and limits workflow hygiene.