ashrafic/filament-white-label
The release is documented, tested, licensed, and has a clear source repository with recent release notes. Maintenance is concentrated in one contributor, while the repository lacks a security policy and uses six unpinned workflow actions.
72%
Total Score
83
100
94
50
Health Score Breakdown
One contributor made all 37 commits in the last three months, creating a high single-maintainer continuity risk despite the recent activity.
Composer build tooling is used, but no security scanning tools are present, leaving an avoidable gap in the project's automated security hygiene.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations for a package integrated into an application.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and it scopes permissions at job level. However, all 6 of 6 action references are unpinned, weakening build reproducibility and action supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ashrafic Labs |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.