Package Health/rupadana/filament-announce

rupadana/filament-announce

Documentation, repository tests, and a matching public source make integration easier. GitHub Actions still need care because one workflow has an unsafe bot check and all 13 action references are unpinned.

Latest 3.2.6

Packagist

59%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 14 releases, but none in the last 12 months and its latest registry release was about 18 months ago. This is meaningful maintenance risk despite the historically short median release interval.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months. That recent inactivity lowers confidence in ongoing maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, although six pull requests remain open. This supports a caution about limited recent project activity.

Workflow audit

All 13 analyzed action references are unpinned, and a high-confidence audit finding reports a potentially spoofable bot check in the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe standalone risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rupadana

Direct Dependencies

Dependency	Last Release	Score
filament/filament Version ^3.0	—	—
illuminate/contracts Version ^10.0\|^11.0\|^12.0	—	—
guava/filament-icon-picker Version ^2.0	—	—
spatie/laravel-package-tools Version ^1.15.0	—	—