fastofi-corp/filament-printables

Release historydanger

The latest release was about three years ago, with no releases in the last 12 months and only five releases overall. This strongly suggests abandonment despite the package having a stable version.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the old last push, this indicates no observed current maintenance capacity.

Repository archiveddanger

The repository is not marked archived, but its last push was about three years ago, which is consistent with the stale release history and raises abandonment risk.

Workflow auditdanger

All 12 analyzed action references are unpinned, and a high-confidence audit finding reports spoofable bot conditions in the Dependabot auto-merge workflow. Three workflows also grant top-level write permissions, increasing workflow hygiene risk.

Security policycaution

The repository has no security policy. This is a minor transparency gap, especially for a package used inside applications, but it is less significant than the lack of recent maintenance.