rectitude-open/filament-news
A clear README, repository tests, release notes, and a security policy provide useful adoption and maintenance context. Workflow automation still needs tighter controls, and the long release and commit gap makes future support less certain.
62%
Total Score
75
94
100
Health Score Breakdown
The package has 36 releases, but none in the last 12 months; its latest release was on September 14, 2025. That prolonged release gap lowers confidence in ongoing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance warning, even though the repository is not archived.
All 7 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull-request trigger has no untrusted checkout or script-injection sink, so this is a hygiene and workflow-safety concern rather than a severe supply-chain verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aspirant Zhang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^3.0 | — | — |
ralphjsmit/laravel-seo Version ^1.7 | — | — |
awcodes/filament-curator Version ^3.7 | — | — |
cviebrock/eloquent-sluggable Version ^10.0 || ^11.0 || ^12.0 | — | — |
mansoor/filament-versionable Version ^0.0.13 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.