haosheng0211/filament-forms-tailtab

Project backingcaution

The registry namespace and repository are owned by the same individual account, providing clear ownership but no organizational backing or broader maintenance capacity.

Release historycaution

This is a young package, about 5 months old, with only one release and no established release cadence. That limits evidence of long-term maintenance but is not abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. With only one release, this provides limited evidence of ongoing maintenance and raises abandonment risk.

Security policycaution

No repository security policy was found. This is a minor transparency gap for reporting vulnerabilities, though it does not outweigh the available maintenance evidence on its own.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a meaningful hygiene concern rather than a severe standalone risk.