filament/actions
Documentation and dependency scope are straightforward for this library. The main weakness is that all 12 recent commits came from one contributor, although organization ownership provides some handoff capacity. The missing security policy and scanning reduce transparency without indicating abandonment.
82%
Total Score
83
100
93
83
Health Score Breakdown
One contributor made all 12 recent commits, creating concentration risk. Organization ownership partly compensates by making a handoff more plausible, but no second active contributor is shown.
Composer is used for builds, but no security-scanning tools were detected. This is a transparency and hygiene gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented for consumers of this library.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2024-51758 filament/actions is vulnerable to Initialization of a Resource with an Insecure Default in versions 3.2.0 - 3.2.123. | 3.2.0 - 3.2.123 | Low |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/csv Version ^9.27 | — | — |
filament/forms Version self.version | — | — |
filament/support Version self.version | — | — |
filament/infolists Version self.version | — | — |
openspout/openspout Version ^4.23 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.