Package Health/devletes/filament-progress-bar

devletes/filament-progress-bar

This is a reasonably healthy, actively published package with a matching source repository, a stable v1 release, clear documentation, changelog, licensing, repository tests, security policy, Dependabot, and safe workflow patterns. The main concerns are its young history of only 3 releases over 162 days, just 3 commits in the last 3 months, and all recent commits coming from one contributor; however, the repository is organization-owned, current, unarchived, and has good project and artifact hygiene. It is suitable to depend on with normal monitoring, though it has not yet demonstrated long-term maintenance depth.

Latest v1.2.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump lifecycle script is present. This is an install-time execution surface, but the signal provides no evidence that it is unsafe, so it is a modest transparency consideration rather than a severe health risk.

Release history

The package is young at 162 days and has only 3 releases, with a median interval of about 81 days. This limits evidence of long-term maintenance maturity, although releases are still ongoing within the last 12 months.

Repo bus factor

All 3 recent commits came from one contributor, creating a concentrated maintenance dependency. The organization-owned repository provides some ability to hand maintenance off, which reduces but does not eliminate this concern.

Repo commit activity

The repository recorded 3 commits in the last 3 months, so development has not stopped, but the activity level is limited for establishing robust ongoing maintenance.

Token permissions

Neither workflow declares top-level token permissions. Although no top-level write permissions are present, explicitly restricting workflow tokens would provide stronger CI hardening.