indracollective/laravel-revisor-filament

Release historycaution

The package has only 3 releases and none in the last 12 months, with the latest published about 14 months ago. This is a meaningful maintenance concern, though the repository remains active enough to avoid treating the package as abandoned.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. A push was observed more recently, but the recent commit window still indicates limited current development activity.

Version stabilitycaution

Version 0.0.3 is not a stable major release, so compatibility expectations are lower for adopters. It is not marked as a prerelease, which partly offsets the concern.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue; top-level write permissions are also used in 3 workflows. The pull_request_target workflow has no untrusted checkout or script-injection finding, so this is workflow hygiene and supply-chain caution rather than a severe dependency verdict.