elmudo-dev/filament-rich-media-plugins
The repository includes tests, a changelog, Dependabot, and a matching package name. Its workflows leave all 12 actions unpinned and several workflows grant broad write access.
58%
Total Score
25
100
89
50
Health Score Breakdown
There were no commits and no active maintainers in the past three months, despite the repository not being archived; this weakens confidence in ongoing maintenance.
A post-autoload-dump install-time script can execute package code during Composer operations, adding a modest transparency and supply-chain consideration.
The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to offset the thin maintenance evidence.
The package is only 98 days old and has one release, so there is little evidence of sustained maintenance or release reliability.
The repository has zero stars, forks, and watchers, so there is no community adoption evidence to supplement the package's short history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hernan Soto |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.0 || ^5.0 | — | — |
illuminate/contracts Version ^12.0||^13.0 | — | — |
ueberdosis/tiptap-php Version ^2.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.