lara-zeus/torch-filament

Release historycaution

The package is 537 days old with 4 releases and 2 releases in the last 12 months; the roughly 128-day median interval indicates a modest, not highly active, cadence.

Repo bus factorcaution

All recent commits came from one contributor, which limits redundancy; organization ownership provides some ability to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

Only 1 commit from 1 active maintainer was recorded over the last 3 months, showing thin recent maintenance activity despite the repository remaining active.

Workflow auditcaution

All 4 workflows were analyzed and all 10 action references are pinned, but one high-confidence bot-conditions finding affects dependabot auto-merge; its pull_request_target workflow also has top-level write permissions, making workflow hygiene a real concern.