solution-forest/filament-firewall

Repo bus factorcaution

One contributor made all recent commits, creating concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only three commits were recorded in the last three months, with activity from one maintainer; this is some maintenance evidence but indicates a limited active base.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows grant top-level write permissions and all eight action references are unpinned; the audit also found a high-confidence template-injection issue. No untrusted checkout or script-injection sink was found, so this is a meaningful hygiene concern rather than a standalone severe risk.