happytodev/filament-tailwind-color-picker

Release historydanger

The latest release was in November 2022, with no releases in the following nearly four years. That is a meaningful abandonment concern, despite the package having 10 releases overall.

Repo commit activitycaution

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance activity is absent.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. Dependabot scanning provides some compensating security hygiene but does not replace a reporting process.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence, high-severity bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, which limits the risk.