shibomb/filament-todo

Release historycaution

The package has only 3 releases, with the latest on October 4, 2023 and no releases in the last 12 months. This is a meaningful maintenance concern for a framework integration package.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no recent maintenance. The repository is not archived, but current activity is absent.

Workflow auditcaution

All 8 analyzed action references are unpinned, which weakens build reproducibility; one workflow also grants top-level write permissions. No untrusted checkout, script injection, or high-severity audit findings were reported, so this is a hygiene caution rather than a severe risk.