solution-forest/filament-translate-field

Dangerous workflowscaution

One of five workflows uses pull_request_target for Dependabot auto-merge, which carries elevated workflow trust implications, although no untrusted checkout or script-injection pattern was detected.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful sign of slowed maintenance despite the recent release history.

Repo issue activitycaution

There were no new or closed issues or pull requests during the last month, while three issues and three pull requests remain open; this suggests limited recent issue follow-through.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers and contributors.

Token permissionscaution

Three workflows request top-level write permissions and two declare no top-level permissions, indicating broader or less explicit automation privileges than ideal and increasing workflow-maintenance risk.