timo-de-winter/filament-authorization

Maintainerscaution

Only one registry account has publish access, which reduces publishing redundancy; the frequent release history provides some compensation but does not remove the single-publisher risk.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, a maintenance concern despite the recent release and push activity.

Security policycaution

No repository security policy was found, leaving disclosure and response guidance undocumented for a security-sensitive authorization package.

Workflow auditcaution

All workflows were analyzed, but all six action references are unpinned. A high-confidence bot-conditions finding affects the Dependabot auto-merge workflow, and two workflows grant top-level write permissions; the pull_request_target workflow has no untrusted checkout or script-injection sink, limiting the severity.