jessedev/filament-kanban
Workflow hygiene is weak, with every action reference unpinned and several workflows granting broad write access. The repository has tests, changelog, licensing, and Dependabot, but no published security policy.
58%
Total Score
50
100
94
50
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script. This adds install-time behavior that should be understood, but the signal alone does not show harmful or unnecessary activity.
There has been only one release in 349 days, so there is little release history to demonstrate sustained maintenance or compatibility support.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently limited maintenance activity.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear for a package intended for application integration.
All 9 analyzed action references are unpinned, and three workflows grant top-level write permissions; the high-confidence bot-conditions finding is hygiene rather than a standalone severe risk because no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mo Khosh |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.0 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.