shibomb/filament-multi-components-column

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because future maintenance is explicitly in doubt.

Release historydanger

The package has only one release, published in February 2023, with no releases during the following three years. This indicates a very limited maintenance history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Together with the archive state, this supports a conclusion of abandonment rather than merely a quiet period.

Repository archiveddanger

The linked repository is archived, and its last push was in October 2023. An archived source repository is a strong indicator that active maintenance has ended.

Workflow auditcaution

All six action references are unpinned, and the audit found two high-confidence findings: spoofable bot conditions and an unpinned container image. These weaken release and automation integrity, although no untrusted checkout or script injection was found.