filagora/filagora-logs

Release historycaution

This package is brand new: its first release was today and it has only two releases, so there is not enough history to demonstrate sustained maintenance.

Repo bus factorcaution

All recent commits came from one contributor. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months and only one maintainer was active, which is limited evidence of ongoing maintenance for a new package.

Version stabilitycaution

Version v0.2.0 is not a stable major release, and the readme states that 0.x minor versions may change the API. That is expected for an early package but increases adoption risk.

Workflow auditcaution

The audit found high-confidence secrets inheritance, one workflow with top-level write permissions, and all four action references unpinned. No untrusted checkout or script injection was found, limiting the risk to workflow hygiene rather than a severe release risk.