ryangjchandler/filament-progress-column

Maintainerscaution

Only one registry account has publish access, which creates some continuity risk, although the recent release and matching source repository provide compensating evidence.

Project backingcaution

The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but not organizational redundancy.

Release historycaution

The package has 11 releases over about four years, but only one release in the last 12 months and a median interval of about 100 days indicate a modest cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite the recent release.

Workflow auditcaution

All five workflows were analyzed, but all 11 action references are unpinned and the audit found high-confidence bot-conditions and unpinned-images issues. The pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a standalone severe risk.