Package Health/njxqlus/filament-relation-manager-component

njxqlus/filament-relation-manager-component

The package is documented, licensed, recently released, and backed by repository tests and release notes. Its maintenance depends on one contributor, while the workflow audit found a high-confidence bot-condition issue, broad write permissions, and unpinned actions.

Latest 2.2.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump install script is present. This is a mild supply-chain and installation-complexity concern, but the signal does not show destructive or unexpected behavior.

Project backing

The repository is owned by an individual user rather than an organization, so the single-maintainer and single-contributor findings are not offset by visible organizational backing.

Repo bus factor

One contributor made 100% of the recent commits, leaving no demonstrated backup contributor and increasing abandonment risk if that maintainer becomes unavailable.

Repo commit activity

Only 2 commits were made in the last 3 months, all by one active maintainer. Recent work exists, but the low volume and concentration reduce maintenance resilience.

Version stability

The release is stable and not a prerelease, but the reported latest version (1.1.3) is lower than the assessed version 2.2.2, indicating inconsistent registry metadata that merits caution.