syriable/filament-auto-translator

Release historycaution

The package was first released less than 2 hours ago and has only three releases, so its maintenance record is too short to establish long-term reliability. The rapid initial release activity is encouraging but does not offset the lack of history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a transparency and hygiene gap for a package intended to run inside application projects, though it is not evidence of a defect by itself.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities or describing security response expectations. This lowers transparency but does not independently make the release unfit to use.

Version stabilitycaution

Version 0.1.2 is not a stable-major release, which signals an evolving public API and possible breaking changes ahead. It is not marked as a prerelease, so this is a moderate maturity concern rather than a severe warning.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only job permissions, and has no untrusted checkout or injection findings. However, all 9 action references are unpinned, so their moving targets create a reproducibility and supply-chain hygiene concern.