Package Health/saasykit/filament-country-field

saasykit/filament-country-field

The release is recent, licensed, documented, and backed by an organization with repository tests and security tooling. Its small user base and single registry publisher limit independent reassurance.

Latest 1.2.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump install-time script, which adds execution during installation. No provided signal shows that the script is harmful or unusually broad, so this is a limited supply-chain hygiene concern.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The recent release partly offsets this, but the lack of ongoing source activity raises maintenance concerns.

Repo popularity

The repository has only 2 stars, 1 fork, and no watchers, so there is little community adoption to provide independent reassurance. This is supporting evidence rather than a standalone abandonment verdict.

Workflow audit

All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. Top-level write permissions also appear in 3 workflows, but no untrusted checkout or script-injection sink was found, limiting the severity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexis

Direct Dependencies

Dependency	Last Release	Score
filament/filament Version ^3.0\|^4.0\|^5.0	—	—
illuminate/contracts Version ^10.0\|^11.0\|^12.0\|^13.0	—	—
spatie/laravel-package-tools Version ^1.15.0	—	—