firevel/filterable

Repo bus factorcaution

All 9 recent commits came from one contributor, leaving maintenance dependent on a single active developer; organization backing partly offsets handoff risk but does not remove it.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving automated security coverage unconfirmed.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.