stafe-group-ab/filament-sticky-panel

Release historydanger

This is the only release, published more than three years ago, with no releases in the last 12 months. That leaves meaningful uncertainty about compatibility and ongoing maintenance, although the repository remains available and unarchived.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with a project that has not received active maintenance for more than three years. Organization backing and the complete initial release provide limited compensation but do not remove the abandonment concern.

Security policycaution

The linked repository has no published security policy. That is a transparency gap for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or untrusted triggers, but all 5 referenced actions are unpinned. That leaves avoidable build-integrity exposure, while the absence of top-level permissions blocks is acceptable on its own.