g4b0rdev/filament-markdown-editor-cheatsheet

Release historycaution

The package has had only one release, published 681 days ago, with no releases in the last 12 months. That provides limited evidence of ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is evidence of limited ongoing maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap, although it is less significant for a small package with a narrow dependency surface.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. The pull-request trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe risk.