focalcrm/filament

The MIT license, matching repository, and organization ownership provide useful transparency. The repository includes tests, but security policy is absent and sustained maintenance is not yet demonstrated. Pin v0.2.3 until a longer release and commit history is available.

Latest v0.2.3

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is less than one day old with five releases in roughly three hours and a median interval of about 39 minutes. This shows active initial publishing but provides no long-term maintenance evidence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Because the package and repository are less than one day old and were pushed recently, this is not abandonment evidence yet, but sustained maintenance remains unproven.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools are reported. That is a modest transparency and maintenance gap for a new package.

Security policy

No security policy is present in the repository. This does not make the package unsafe, but it weakens disclosure and maintenance transparency.

Version stability

Version v0.2.3 is not a stable major release, so its compatibility and maturity are not yet established. It is not marked as a prerelease, which is a small compensating signal.