niek-ph/laravel-posts-filament

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating that development activity has currently stalled despite the earlier release history.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package, weakening evidence that the repository documents the published artifact.

Security policycaution

No repository security policy is provided, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

This is an early 0.1.0 release, so compatibility and long-term API stability are not yet demonstrated.

Workflow auditcaution

All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is a workflow-hygiene concern rather than a severe standalone risk.