wotz/filament-chatbot

Release historycaution

The package is only 161 days old with three releases, but its median release interval is about 3.6 days, showing an active initial launch period rather than an established history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance gap for a package that is still under one year old.

Security policycaution

The repository has no SECURITY.md policy, leaving vulnerability reporting and response expectations less explicit even though the README provides an email contact.

Version stabilitycaution

v0.3.0 is not a stable major release, so API or behavior changes remain more likely than for a mature 1.0+ package.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write access. High-confidence bot-condition and template-injection findings add workflow hygiene concerns, although no untrusted checkout or script-injection sink was detected.