muhammad-nawlo/filament-sitemap-generator

Workflow auditdanger

All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, which limits the risk but does not remove the workflow hygiene concern.

Project backingcaution

The package is maintained under a personal GitHub account rather than an organization, so the single-maintainer registry profile provides limited evidence of broader project backing.

Release historycaution

This is a young package with one release, first published about 203 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern for a package with only one release.

Repo issue activitycaution

There are no open issues and two open pull requests, but no issues or pull requests were closed or merged in the last month, offering little evidence of active community handling.