jeffersongoncalves/filament-bladewind

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational maintenance buffer. The matching repository and included tests provide some support.

Release historycaution

The package is only 1 day old, with 9 releases concentrated in that period. This shows active initial work but provides no evidence of sustained maintenance yet.

Repo commit activitycaution

The repository has no commits and no active maintainers recorded in the last 3 months. Because the project is only 1 day old, this is not evidence of abandonment, but it leaves long-term maintenance unproven.

Security policycaution

No security policy is present. This is a transparency gap for a package that integrates into application panels, though the small project's tests and dependency scanning provide some compensation.

Workflow auditcaution

All 5 workflows were analyzed and all 11 action references are pinned, but the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. Three workflows also grant top-level write permissions, making the automation hygiene worth addressing.