ghanem/rating-filament
Healthy and usable for adoption, with a young but active project behind it. The main caveat is that all recent repository work comes from one contributor, while the repository lacks explicit top-level workflow permissions.
78%
Total Score
80
100
94
90
Health Score Breakdown
Only one registry account has publish access. That is a limited publishing base, although the repository is owned by an organization, which provides some backing beyond the registry account.
The package is young at 45 days old with three releases and a median interval of about 11 days. That shows early activity, but the short history leaves long-term maintenance unproven.
All 22 commits in the last three months came from one contributor, creating a real continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off, but no second active contributor is evidenced.
The only workflow lacks a top-level permissions declaration. No write permissions were observed, but explicitly declaring least-privilege permissions would make the workflow's security posture clearer.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 abdullah ghanem |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ghanem/rating Version ^2.1 | — | — |
filament/filament Version ^4.0|^5.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.