vincent-tarrit/filament-flagd

Maintainerscaution

One registry maintainer and a user-owned project create a thin maintainer base, leaving limited visible redundancy if that person stops maintaining it.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning despite the recent release history.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The audit also found a high-confidence bot-condition issue; the pull_request_target workflow had no untrusted checkout or script-injection sink, so this is caution rather than danger.