gru2007/filament-jetstream-ru
Its MIT license, detailed README, source tests, and security policy make the project easy to inspect. Maintenance remains unproven after one release and no commits in the past three months. Workflow permissions and unpinned actions add avoidable release hygiene concerns.
54%
Total Score
50
100
94
83
Health Score Breakdown
The registry namespace and repository are owned by the same individual account, so ownership is consistent, but there is no organization backing shown to provide broader maintenance capacity.
The package has made only one release, about 13 months ago, with no releases in the past 12 months. That leaves ongoing maintenance and compatibility support unproven.
The repository recorded zero commits and zero active maintainers in the past three months. Combined with a single release, this is a meaningful maintenance concern.
All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. There were no untrusted checkouts or script-injection findings, but the workflow hygiene remains a caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 stephenjude |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.0 | — | — |
illuminate/contracts Version ^12.0 | — | — |
mobiledetect/mobiledetectlib Version ^4.8 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
stephenjude/filament-two-factor-authentication Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.