sikessem/filament

Registry deprecationdanger

Packagist marks the package abandoned at package scope and names sikessem/components as its replacement. That directly indicates this release line should not be adopted for new dependencies.

Release historycaution

The package has four releases, but none in the last 12 months; its latest registry release is v0.2.0. This adds meaningful abandonment risk despite a previously regular median interval of about 15 days.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That weakens confidence in ongoing maintenance, even though the repository is not archived.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the package's abandonment status.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkouts or injection findings. However, all 3 analyzed action references are unpinned, leaving avoidable build-reproducibility and supply-chain hygiene risk.