noin/filament-activity-log

Project backingcaution

The repository is owned by an individual account rather than an organization, so the small contributor base provides less formal handoff capacity; the two active contributors partly offset this.

Repo popularitycaution

The repository has only 2 stars, 1 fork, and no watchers. This is weak supporting evidence, but popularity alone does not outweigh the active release and contributor signals.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence of abandonment.

Version stabilitycaution

This release is a prerelease while the package has since reached stable major version 5.2.0, so depending on this beta carries some avoidable stability risk.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings, untrusted checkouts, or script injection. However, 9 of 10 action references are unpinned and one workflow grants top-level write access, creating a meaningful maintenance and supply-chain hygiene caveat.