wotz/filament-menu

Dangerous workflowscaution

One workflow uses pull_request_target, which warrants review because that trigger can be sensitive, but the scan found no untrusted checkouts or script-injection patterns.

Repo bus factorcaution

All 2 recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were made in the last 3 months by one active maintainer. Recent releases remain frequent, but the limited recent commit volume leaves less evidence of broad ongoing maintenance capacity.

Repo popularitycaution

The repository has no stars or forks and only 2 watchers, indicating limited external adoption. This is supporting evidence rather than a decisive health problem because release and maintenance activity are present.

Security policycaution

The repository has no SECURITY.md policy, leaving vulnerability reporting and response expectations less transparent despite the README providing a contact address.