smart-cms/core

Documentation, licensing, and release notes are present, and the project has organizational backing. The long release gap, no recent commits, missing security policy, and weak workflow hygiene make maintenance and publishing risk material.

Latest 1.0.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 18 runtime dependencies, including a substantial Laravel and Filament stack. That broad dependency surface increases upgrade and compatibility maintenance burden.

Release history

Only two releases exist, with the latest on December 9, 2024 and no releases in the last 12 months. This is a meaningful maintenance concern for a package intended as a CMS core.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with no registry releases in the last year, this suggests maintenance has gone quiet.

Security policy

The repository has no security policy. For a CMS package handling administration, forms, and authentication-related components, this weakens vulnerability-reporting transparency.

Workflow audit

All seven action references are unpinned, all three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe standalone risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

smart_cms

Direct Dependencies

Dependency	Last Release	Score
symfony/yaml Version ^7.1	—	—
filament/filament Version ^3.2	—	—
laravel/framework Version ^11.9	—	—
livewire/livewire Version ^3.4	—	—
outerweb/settings Version ^1.0	—	—