serjoagronovdev/qr-generator-filament

Release historydanger

The package has only two releases, both published on the same day, with no releases in the last 12 months. This provides little evidence of an established maintenance cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package having had no release activity for nearly two years.

Maintainerscaution

Only one registry account has publish access. That is a thin operational base for a user-owned project and increases continuity risk if the maintainer becomes unavailable.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit reports a high-confidence bot-conditions finding in the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script injection, limiting the exposure but not removing the hygiene concern.