coolsam/signature-pad
Signature Pad for FilamentPHP
68%
Total Score
100
94
75
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script. This adds install-time behavior that deserves awareness, but the signal alone does not show harmful or unusually broad actions.
The package has six releases since August 2023 but none in the last 12 months, with the latest registry release in October 2024. Recent repository activity partly offsets abandonment concerns, but the published release cadence is stale.
The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, and all 12 analyzed action references are unpinned. Three workflows grant top-level write permissions, though no untrusted checkout or script injection was found, so this is a real hygiene and supply-chain concern rather than a standalone disqualifier.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sam Maosa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/forms Version ^3.0 | — | — |
illuminate/contracts Version ^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.