wotz/filament-resource-picker

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed recently and the package has release history, the lack of recent commit activity raises maintenance risk.

Security policycaution

The repository has no SECURITY policy file. The README provides a vulnerability contact address, which partly compensates for the missing formal policy but leaves security reporting guidance less transparent.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found high-confidence bot-condition and template-injection issues in separate workflows. There are no untrusted checkouts or script-injection findings, so this is workflow hygiene risk rather than a severe release-blocking issue.