packstub/filament-rating
The repository includes tests, a changelog, release notes, security scanning, and a security policy. Its Dependabot auto-merge workflow has a high-confidence bot-condition finding, but no untrusted checkout or script injection was detected.
76%
Total Score
75
86
75
Health Score Breakdown
The package is newly published, with two releases arriving on the same day about 2 hours apart. This limits evidence of sustained maintenance, but does not by itself indicate abandonment.
The repository reports zero commits and zero active maintainers in the last 3 months, which is weak evidence of ongoing maintenance. Because the package itself was released only hours ago and the repository was recently pushed, this is best treated as limited history rather than clear abandonment.
Version v0.2.0 is not on a stable major version, so compatibility expectations are limited. It is not marked as a prerelease, which partly offsets that concern.
All six workflows were analyzed and all 12 action references are pinned, with no untrusted checkout or script injection found. A high-confidence bot-condition finding and two workflows with top-level write permissions are workflow hygiene concerns, but no dangerous sink was identified.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ion Caliman |
| Packstub |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.0 || ^5.0 | — | — |
spatie/laravel-package-tools Version ^1.92 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 1 day ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.