marjose123/filament-lockscreen

Maintainerscaution

Only one registry account has publish access. That is a real continuity concern for a user-backed project, although repository activity shows the same maintainer is still publishing.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no provided organizational backing to compensate for concentrated maintenance.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance fully concentrated in MarJose123 with no demonstrated backup contributor.

Repo commit activitycaution

Only two commits were recorded in the last three months. This is limited activity, but it coincides with a recent release rather than a prolonged disappearance.

Workflow auditcaution

All four action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the severity.