tomatophp/filament-blog

Dependency profilecaution

The package has 10 runtime dependencies, including several related tomatophp packages and framework components. This is a meaningful integration surface, though the dependencies are consistent with the package's documented Filament blog functionality.

Release historycaution

Only two releases have been published over roughly 1 year 11 months, with one release in the last 12 months. The long release interval makes ongoing maintenance less certain, despite the recent release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the sparse release history, this is the main evidence of uncertain ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a hygiene gap, although it is not by itself evidence that the package is unsafe.

Token permissionscaution

The single workflow does not declare top-level token permissions. No write-enabled permissions were detected, but explicit least-privilege declarations would provide stronger workflow transparency.