rawilk/filament-quill

Repo bus factorcaution

Three contributors were active recently, although the top contributor made about 64% of commits. The presence of two additional active contributors partly offsets that concentration.

Workflow auditcaution

All 12 analyzed action references are unpinned, and four workflows grant top-level write permissions. The audit also found one high-confidence bot-conditions issue in the pull_request_target Dependabot workflow; there was no untrusted checkout or script injection, so this is a meaningful hygiene concern rather than a standalone severe verdict.