Package Health/daikazu/filament-image-checkbox-group

daikazu/filament-image-checkbox-group

Documentation, licensing, repository tests, and recent commits support continued maintenance. The project is small and lacks a security policy, while its release-version metadata is inconsistent and workflow hygiene needs attention.

Latest v2.2.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry publishing account is a limited publishing base, but repository activity shows two active contributors recently, partly offsetting the registry concentration.

Project backing

The repository is owned by an individual rather than an organization, so the small maintainer base has less institutional backing to absorb maintainer absence.

Security policy

No security policy was found. This is a transparency gap for reporting vulnerabilities, although it does not by itself indicate abandonment.

Version stability

This release is marked stable and not a prerelease, but the reported latest version is v1.0.1 while the assessed release is v2.2.0. That inconsistency reduces transparency in the collected registry metadata.

Workflow audit

The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow and all 12 analyzed action references are unpinned. Three workflows also grant top-level write permissions; without an untrusted checkout or script-injection sink, these are workflow-hygiene concerns rather than a severe standalone risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mike Wall

Direct Dependencies

Dependency	Last Release	Score
filament/forms Version ^4.0\|\|^5.0	—	—
filament/support Version ^4.0\|\|^5.0	—	—
illuminate/contracts Version ^12.0\|\|^13.0	—	—
spatie/laravel-package-tools Version ^1.93	—	—