kerodev/filament-logger

Release historycaution

Only 2 releases have been published over about 9 months, with a median interval of about 89 days. This is limited but not conclusive evidence of abandonment because the package is still relatively young.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern for this young package.

Security policycaution

The repository has no security policy, reducing vulnerability-reporting transparency, though this is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

All 12 action references are unpinned, three workflows grant top-level write permissions, and the audit found a high-confidence bot-conditions warning. The pull_request_target workflow has no reported untrusted checkout or script injection, so this is caution rather than a severe risk.