z3d0x/filament-fabricator

Maintainerscaution

A single registry publishing account is listed, which creates some continuity reliance, but the repository and release history show an active project rather than an abandoned package.

Project backingcaution

The package and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing to offset single-maintainer continuity risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning despite the recent package release and push.

Repo issue activitycaution

Only one issue and one pull request are open, but there was no issue or pull-request activity in the last month; this is a minor sign of limited current engagement.

Workflow auditcaution

All five workflows were analyzed, but all 13 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink.