elegantly/filament-kpi

Release historycaution

The package is about 740 days old with four releases and only one release in the last 12 months, indicating a relatively slow release cadence but not abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may be slowing.

Repo issue activitycaution

There are no open issues and two open pull requests, but no pull requests were merged in the last month; this offers limited evidence of current project activity.

Workflow auditcaution

The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; all nine action references are unpinned, and two workflows grant top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow hygiene and maintenance risks rather than a severe standalone dependency risk.