shipu/filament-boring-avatars
The MIT license, clear README, repository tests, and automated dependency tooling provide useful transparency. However, the package has had no release or commit activity for over three years, and its workflow audit found a high-confidence bot-condition issue alongside broad write permissions and unpinned actions.
42%
Total Score
0
86
50
Health Score Breakdown
The package has only one release, published over three years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency users may need to keep compatible with current Filament versions.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no update for over three years. The repository is not archived, but that does not compensate for the prolonged inactivity.
All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects a workflow with top-level write permissions. The pull_request_target trigger is ordinary by itself, but the combination warrants caution in the release workflow.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christian Dinglasan |
| Shipu Ahamed |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^2.0 | — | — |
illuminate/contracts Version ^9.0|^10.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.