wotz/filament-seo

Dangerous workflowscaution

Five workflows were analyzed with no untrusted checkouts or script injection, but one Dependabot workflow uses pull_request_target, which warrants additional review because it runs in a privileged workflow context.

Dependency profilecaution

Eight runtime dependencies, including Filament and several related packages, create meaningful compatibility surface for an integration package, but the profile is coherent with its stated framework role.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last 3 months, so current maintenance capacity is thin despite the recent release activity.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package used in application infrastructure.