solution-forest/filament-rating-star

Release historycaution

Only two releases exist, with the latest on June 5, 2025 and no releases in the last 12 months; this is meaningful evidence of a stalled release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, reinforcing the release-history concern about currently inactive maintenance.

Security policycaution

No security policy is present, leaving contributors and users without a documented vulnerability-reporting path; this is a minor transparency gap.

Workflow auditcaution

All 12 action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is caution rather than a severe risk.