Package Health/solution-forest/filament-field-group

solution-forest/filament-field-group

Usable with caveats: the package is licensed, documented, actively released, and backed by a matching organization repository. However, it has had no commits from active maintainers in the last three months, while several workflows use write permissions and one handles pull-request automation.

Latest 3.0.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

Five workflows were analyzed with no untrusted checkouts or script injection, but one pull_request_target workflow performs Dependabot auto-merge, which warrants caution because that event type can expose elevated workflow privileges.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a real maintenance concern despite the recent release history and repository push.

Token permissions

Four workflows declare top-level write permissions and one test workflow declares none, leaving a broader-than-necessary automation permission surface even though no direct exploit was observed.

Version stability

The assessed release is marked as a stable major and is not a prerelease, with only 5% recent prereleases. The reported latest version being 2.0.3 while assessing 3.0.2 is inconsistent and reduces confidence in the version metadata.