offline-agency/filament-spid

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the registry shows frequent releases, the lack of recent source activity is a meaningful maintenance concern.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear for an authentication plugin.

Version stabilitycaution

Version 0.1.8 is not a stable major release, so compatibility may still change before 1.0. The release is not marked as a prerelease, which partly reduces that concern.

Workflow auditcaution

All 10 analyzed action references are unpinned, reducing build reproducibility, and one workflow grants top-level write access. The audit found no untrusted checkouts, script injection, or other high-confidence dangerous findings, so this is a hygiene concern rather than a severe risk.