timo-de-winter/filament-redactor-field

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated maintainer and contributor activity represents a genuine single-person continuity risk.

Repo bus factorcaution

One contributor made all commits in the last three months, so maintenance is fully concentrated in a single person. The recent release and active repository partly offset, but do not remove, this continuity risk.

Repo commit activitycaution

Only two commits were made in the last three months by one active maintainer. Recent activity is positive, but the low volume limits evidence of sustained maintenance capacity.

Security policycaution

No security policy was found. This is a transparency gap for reporting vulnerabilities, though it is less severe for a small field package than for security-sensitive infrastructure.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, all six action references unpinned, and top-level write permissions in two workflows. No untrusted checkout or script injection was found, which limits the impact but leaves meaningful workflow hygiene and control concerns.