elmudo-dev/filament-surveys
The package includes a README, changelog, release notes, repository tests, and a security policy. Its dependency set is modest and the linked repository clearly matches the package; pin v2.0.3 until maintenance resumes.
62%
Total Score
50
100
94
100
Health Score Breakdown
The package is only about 5.5 months old and all five releases arrived within a short burst, so there is limited evidence of sustained maintenance over time.
The repository recorded zero commits and zero active maintainers over the past three months. For a young package, this is a meaningful maintenance concern, though it does not alone prove abandonment.
The audit analyzed all five workflows, but all 12 action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-conditions finding flags spoofable actor checks in the Dependabot auto-merge workflow. No untrusted checkout or script injection was found, so this is a hygiene and workflow-safety caution rather than a severe release risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 elmudometal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.3 || ^5.0 | — | — |
spatie/laravel-sluggable Version ^3.7.5 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.