tomatophp/filament-docs

Dangerous workflowscaution

One workflow uses pull_request_target for Dependabot auto-merge, which requires elevated trust, but no untrusted checkout or script-injection patterns were detected across the three analyzed workflows.

Release historycaution

The package has existed for 700 days with five releases, but only one release occurred in the last 12 months and the median interval is about 80 days, indicating a relatively slow cadence.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months, which is a meaningful maintenance concern despite the recent push and merged pull requests.

Token permissionscaution

Two workflows grant top-level write permissions and one workflow lacks a top-level permissions declaration, leaving CI permissions broader or less explicit than ideal.