stats4sd/filament-team-management
Documentation, release notes, and recent work from three active contributors support ongoing maintenance. Keep workflow hygiene in mind: every action reference is unpinned, and one high-confidence condition warning affects the Dependabot automation.
72%
Total Score
100
100
75
Health Score Breakdown
The package runs a post-autoload-dump lifecycle script, which adds install-time behavior that consumers should understand, though this signal alone is not evidence of unsafe behavior.
All 13 analyzed action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. There are also three workflows with top-level write permissions, although no untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Stats4SD |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 awcodes/shout Version ^3.0 | — | — |
filament/filament Version ^4.2 | — | — |
livewire/livewire Version ^3.6.4 | — | — |
spatie/laravel-package-tools Version ^1.15.0 | — | — |
althinect/filament-spatie-roles-permissions Version ^3.x-dev | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.