lartisan/filament-rating-tool
The package has clear documentation, licensing, repository tests, and security tooling. Maintenance has stopped since March 2025, while a high-confidence workflow issue and entirely unpinned actions add operational risk.
55%
Total Score
25
100
93
75
Health Score Breakdown
There were no commits and no active maintainers in the last three months. Combined with the 18-month gap since the latest release, this is a concrete abandonment concern.
The registry and repository are owned by the same individual account. This is consistent ownership, though it indicates a limited backing structure rather than organizational support.
Only two releases exist, and none were published in the last 12 months; the latest release was about 18 months ago. This indicates slow maintenance for a package that may need compatibility updates.
All five workflows were analyzed, but all 12 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is caution rather than a severe workflow verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cristian Iosif |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^3.3 | — | — |
illuminate/contracts Version ^9.28|^10.0|^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.20 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.