Roles and permissions for Filament, built on spatie/laravel-permission
68%
Total Score
caution
Usable with caveats: a new project with all recent work from one contributor carries meaningful continuity risk.
Nine runtime dependencies, including Filament, Laravel components, and Spatie permissions, make this a meaningfully integrated package with compatibility surface, but the profile is coherent for its stated role.
The package is only 44 days old, with 17 releases concentrated in that period and a median interval of about 24 minutes. This shows active early development but not yet a long record of stability.
One contributor made all 19 commits in the last three months, leaving no demonstrated contributor redundancy. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository has no published security policy, leaving reporting and response expectations undocumented for a package that manages application roles and permissions.
All three workflows use read-only permissions and the audit found no untrusted checkouts, injection sinks, or other findings. However, all 15 action references are unpinned, which weakens build reproducibility and supply-chain control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^8.0 | — | — |
filament/filament Version ^5.7 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.