Switch between accounts in Filament: impersonate users, linked sub-accounts with password-confirmed escalation, and one-click developer logins.
72%
Total Score
caution
Usable with caveats: maintenance is active, but one contributor and a high-confidence workflow warning add risk.
The package is only 33 days old but has 21 releases, including releases in the last 12 months; this shows active work but limited long-term maintenance history.
One contributor made 100% of the last three months' commits, creating a meaningful continuity risk despite the repository being organization-owned.
There were 34 commits in the last three months, showing strong recent activity, but all were made by one active maintainer.
All six workflows were analyzed and all 10 action references are pinned, with no untrusted checkout or script-injection findings. However, a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow, and two workflows grant top-level write permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0 || ^5.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.92 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.