Package Health/schmeits/filament-4-phosphor-icons

schmeits/filament-4-phosphor-icons

Documentation, licensing, and repository structure are in good shape. The project has had no registry release in over a year, while a high-confidence workflow check and broad write permissions add maintenance hygiene concerns.

Latest 1.0.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

The registry has one publishing maintainer, which is a limited publishing base. Repository activity from two contributors provides some compensating maintenance capacity.

Project backing

The repository is owned by the same individual namespace as the package, so there is no organization backing to offset the small maintainer base.

Release history

There have been no registry releases in the last 12 months, which raises version freshness and abandonment concerns. Recent repository commits and a push within the last month partly compensate, but do not replace a current release.

Repo bus factor

Two contributors are active, with the leading contributor responsible for two-thirds of recent commits. This is concentrated but not a single-person project.

Workflow audit

All workflows were analyzed and all action references are pinned, but three workflows grant top-level write permissions and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this remains a hygiene concern rather than a severe risk.