I use the following with my PIRs:
on each triggering event I store datetime in an appropriate input_datetime.
then I have an automation that runs every hour and reports every PIR whose input_datetime is older than a maximum time set by input_number.
No Node Red here as it’s pretty simple.