wotz/filament-social-media-links

Dangerous workflowscaution

One of five workflows uses pull_request_target, which can carry elevated-risk behavior; no untrusted checkouts or script-injection patterns were detected, limiting the concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a maintenance concern, although the same period includes a current release and a recently merged pull request.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting guidance unclear for consumers and maintainers.

Token permissionscaution

Four workflows omit top-level permissions and one workflow grants top-level write access. The absence of narrowly declared permissions increases workflow exposure, particularly alongside the pull_request_target workflow.