Package Health

jeffersongoncalves/filament-pwa

The project has clear documentation, release notes, repository tests, and a second active contributor. Its main weakness is a high-confidence workflow template-injection finding, while security-policy coverage is also limited.

Latest 3.1.0PackagistPackagist

79%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

Six releases in the first 86 days show active early development, although the short history and same-day release clustering provide limited evidence of long-term stability.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a modest transparency gap for a maintained package.

Workflow auditcaution

All four workflows were analyzed and all 13 action references are pinned, with no untrusted checkout or script-injection trigger. However, the high-confidence template-injection finding in update-changelog.yml is a real workflow hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jefferson Gonçalves

Direct Dependencies

DependencyLast ReleaseScore
filament/filament
Version ^5.0
—
—
spatie/laravel-package-tools
Version ^1.14.0
—
—
jeffersongoncalves/laravel-pwa-favicon
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform