mstfkhazaal/filament-logger
The repository includes tests, a changelog, and security scanning, but its automation has all nine action references unpinned and a high-confidence bot-condition warning. The package appears maintained in structure, yet its release and commit activity stopped years ago.
40%
Total Score
0
79
50
Health Score Breakdown
The package has 18 releases, but none in the last 12 months; its latest release was over three years ago. That long publishing gap is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent releases. This materially lowers confidence in ongoing maintenance.
The repository is not archived, which is a positive counter-signal, but it was last pushed over three years ago and therefore does not offset the inactive activity.
All 9 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. There are no untrusted checkouts or script injections, so this is a hygiene and workflow-risk concern rather than a standalone severe failure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Moustafa Khazaal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^2.11 | — | — |
illuminate/contracts Version ^8.0 | ^9.0 | ^10.0 | — | — |
spatie/laravel-activitylog Version ^4.5 | — | — |
spatie/laravel-package-tools Version ^1.13.5 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.