konnco/filament-import

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the absent recent releases, this is the strongest abandonment warning in the assessment.

Release historycaution

The package has 33 releases since September 2022, but none in the last 12 months; its latest release was in April 2025. The long release gap is a meaningful maintenance concern.

Repo issue activitycaution

There are 14 open issues and 15 open pull requests, but no issues or pull requests were opened or merged in the last month. The unresolved backlog reinforces concerns about current responsiveness.

Security policycaution

No security policy is present in the repository. This is a transparency gap, though it is less important than the observed maintenance slowdown.

Workflow auditcaution

All 15 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than severe standalone risks.