Package Health/beranidigital/filament-access

beranidigital/filament-access

Organization backing, a matching repository, licensing, tests, and security tooling provide useful safeguards. The package also runs a post-autoload-dump script, while its workflows use broad permissions and unpinned actions.

Latest 0.3

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump lifecycle script during Composer installation, adding executable install-time behavior that consumers should understand.

Release history

The package is about 812 days old but has only four releases and one release in the last 12 months, indicating a thin release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may currently be paused.

Version stability

Version 0.3 is not a stable major release, so compatibility expectations are lower even though it is not marked as a prerelease.

Workflow audit

All five workflows were analyzed, but all 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects Dependabot auto-merge. No untrusted checkout or script-injection sink was found, so this is a hygiene and workflow-control concern rather than a severe standalone risk.