el-schneider/statamic-lottie-preview

Release historydanger

The package has only three releases, all concentrated in January 2025, with no releases in the following 20 months. That limited and stopped release history raises abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with roughly 20 months since the last recorded push. This is strong evidence of stalled maintenance.

Workflow auditdanger

All four workflows were analyzed, but the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. All nine action references are unpinned, and three workflows grant top-level write permissions, increasing workflow supply-chain and maintenance risk.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the thin maintenance activity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one pull request remains open. This provides little evidence of current maintenance.