josespinal/filament-record-navigation

Release historycaution

The package has had no registry release in the last 12 months, which raises a maintenance concern despite the repository showing recent activity.

Repo bus factorcaution

Two contributors are active, but one accounts for 6 of 7 recent commits, leaving maintenance substantially concentrated.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and disclosure expectations less clear.

Workflow auditcaution

All 11 analyzed action references are unpinned, and two workflows grant top-level write access; no untrusted checkout, injection, or auditor findings were reported, so this is a hygiene concern rather than a severe risk.