solution-forest/filament-goaccess

Release historycaution

This is a young package, first released 59 days ago, with only one release and no established release cadence. That limits evidence of long-term maintenance.

Repo bus factorcaution

All four recent commits come from one contributor. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Four commits from one active maintainer in the last three months show initial development activity, but the small amount of activity provides limited evidence of ongoing support.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting and handling security issues, though it is not evidence of maliciousness.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or auditor findings. However, all seven action references are unpinned, and one workflow grants top-level write permissions, creating avoidable supply-chain and token-scope risk.