digit7s/filament-audit-toolkit

Release historycaution

The package is less than a day old, with two releases arriving about five hours apart. This shows initial activity but provides almost no evidence of sustained maintenance.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months. Because the package is less than a day old, this is partly explained by its age, but it leaves ongoing maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a new package this is a modest transparency and maintenance gap, not a standalone severe risk.

Version stabilitycaution

Version v0.1.1 is not a stable major release, so its API and behavior may change substantially as the project matures.

Workflow auditcaution

The single workflow has read-only permissions and no reported audit findings, but both analyzed action references are unpinned. That leaves workflow supply-chain inputs less reproducible than they should be.