invaders-xx/filament-jsoneditor
Filament's JSON Editor input
60%
Total Score
50
83
50
Health Score Breakdown
Only one account has registry publish access. Because the repository is user-owned rather than organization-backed, this leaves a thin publishing and maintenance base.
The package has 25 releases since March 2022, but none in the last 12 months; the latest release was about 19 months ago. This suggests maintenance may have slowed substantially.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the long release gap rather than showing ongoing maintenance between releases.
All 11 action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow has no untrusted checkout or script injection, limiting the risk to workflow hygiene rather than a severe finding.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Vincent |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^3.0 | — | — |
illuminate/contracts Version ^8.74|^9.0|^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.