momenoor/filament-tiptap-editor

Project backingcaution

The package and repository are owned by the same individual account, so ownership is coherent, but there is no organization backing shown to offset the thin maintainer base.

Release historycaution

This is the only release, published 133 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful sign of slowing maintenance for a new package.

Repo issue activitycaution

There are three open pull requests but no new or closed issues and no merged pull requests in the last month, suggesting limited recent project activity.

Workflow auditcaution

All four workflows were analyzed, but all 10 action references are unpinned and two workflows grant top-level write access. A high-confidence bot-condition finding also affects the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a caution rather than a severe workflow risk.