newcbt/filament

Release historydanger

The package has a substantial history with 1,063 releases, but its latest release was nearly two years ago and it had no releases in the last 12 months, indicating possible abandonment.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance and abandonment concern.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little visible community adoption or independent attention to offset the maintenance concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a repository hygiene gap.

Workflow auditcaution

All 10 workflows were analyzed without audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all 27 action references are unpinned, creating a reproducibility and action-substitution hygiene gap.