filagora/filagora-core

Release historycaution

The package is only 1 day old, despite six releases in that period; this shows activity but provides little evidence of long-term maintenance.

Repo bus factorcaution

All 15 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's separate security policy partly offsets this transparency gap.

Version stabilitycaution

Version v0.2.1 is not a stable major release, so its documented 0.x API-change policy increases compatibility risk for dependents.

Workflow auditcaution

The audit covered both workflows and found no untrusted checkout or script injection, but all four action references are unpinned, one workflow has top-level write permissions, and high-confidence secrets-inherit was flagged.