cheesegrits/filament-military-time
The package includes tests, a clear README, an MIT license, security policy, and Dependabot scanning. Its small project footprint and early-stage history leave less evidence of long-term maintenance, while the workflow audit found a high-confidence bot-condition issue and all nine action references are unpinned.
62%
Total Score
50
100
94
75
Health Score Breakdown
The package runs a post-autoload-dump install-time script, adding execution during installation and a modest supply-chain exposure.
The repository is owned by the matching individual registry namespace, so ownership is transparent, though it does not provide organization-level backing.
This is a young package with one release in 151 days and no established release cadence, so long-term maintenance is not yet demonstrated.
There were no commits and no active maintainers in the last three months, leaving a meaningful concern about ongoing maintenance capacity.
The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; additionally, all nine analyzed action references are unpinned, weakening build reproducibility. No untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hugh Messenger |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/forms Version ^4.0|^5.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.