solution-forest/filament-simplelightbox

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Recent package releases and a June 2026 push provide some compensation, but the current activity gap still raises maintenance concern.

Workflow auditcaution

All four workflows were analyzed, but all 9 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene and automation concern rather than a severe standalone risk.