This is my package filament-sort-order
57%
Total Score
caution
Usable with caveats: no registry release in nearly two years, despite a recent repository push.
The package runs a post-autoload-dump install-time script. This adds execution during installation and warrants attention, but the signal alone does not show that the script is unsafe or unusually broad.
Only one registry account has publish access, leaving a thin publishing base. The repository is user-owned rather than organization-backed, so no compensating organization context is shown.
The package and repository are both owned by the same individual account, confirming ownership alignment but showing no organizational backing to offset the single-maintainer risk.
The package has nine releases since July 2023, but none in the last 12 months and the latest registry release was nearly two years ago. This raises maintenance and abandonment concerns.
The repository recorded no commits and no active maintainers in the last three months. The recent push shown by repository status provides some compensation but does not establish sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^2.0|^3.0-stable | — | — |
illuminate/contracts Version ^10.0|^11.0 | — | — |
spatie/laravel-package-tools Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.