devanderson/filament-media-gallery

Release historycaution

The package has only one release, published about nine months ago, so there is little evidence of release maturity or sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, leaving little evidence of ongoing maintenance after the initial release.

Repo popularitycaution

The repository has one star and no forks or watchers. This is only supporting evidence, but it indicates limited visible adoption and review.

Repo toolingcaution

The repository uses Composer and Make for build-related work, but no security scanning tools were detected, leaving a modest hygiene gap.

Workflow auditcaution

All three workflows were analyzed without audit findings or untrusted-code sinks, but all eight action references are unpinned and two workflows grant top-level write permissions. These are meaningful reproducibility and least-privilege weaknesses, though not severe on their own.