agelgil/filament-ethiopic-calendar
The package includes a clear README, MIT licensing, repository tests, and two active contributors. Its small release history, unpinned workflow actions, and broad workflow write permissions warrant care for long-term maintenance and build security.
70%
Total Score
100
83
50
Health Score Breakdown
The package runs a post-autoload-dump install-time script, which adds execution during installation and deserves review beyond ordinary dependency declarations.
The package has four releases over 498 days, with two releases in the last 12 months and a median interval of about 222 days. The latest release is recent, but the overall cadence is light.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version v0.3.0 is not a stable major release, so its API may still change even though it is not marked as a prerelease.
All eight analyzed action references are unpinned, and two of three workflows grant top-level write permissions. The audit found no untrusted checkout or script-injection paths, so this is workflow hygiene risk rather than a severe exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Samson Endale |
| Mo Khosh |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.0|^5.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.