igamov/filament-media-gallery
The repository includes tests, a security policy, and active build tooling, but workflow controls need attention. The stable release is documented and licensed, though ongoing maintenance evidence is limited.
58%
Total Score
75
100
94
100
Health Score Breakdown
This is the only release, published 811 days ago, with no releases in the last 12 months; that limits evidence of ongoing maintenance for a dependency.
There were no commits and no active maintainers in the last three months, which is a meaningful warning when combined with only one registry release.
All four workflows were analyzed, but all 9 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. One pull_request_target workflow also has top-level write permissions, increasing workflow hygiene and supply-chain risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 igamov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.