schmeits/filament-umami-widgets

Project backingcaution

The registry and repository are owned by the same individual, so there is no ownership mismatch; this also indicates a relatively narrow project backing model.

Release historycaution

The package has 13 releases since June 2024, but none in the last 12 months; this indicates a meaningful maintenance slowdown despite its earlier release activity.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, which is a concrete maintenance concern even though the repository is not archived.

Workflow auditcaution

All five workflows were analyzed and all action references are pinned, but three workflows grant top-level write permissions and a high-confidence bot-conditions finding appears in the Dependabot auto-merge workflow; no untrusted checkout or script-injection sink was found.