tomatophp/filament-cms

Usable with caveats: the package is licensed, tested, documented, non-deprecated, and backed by a matching organization repository. Recent commit activity is absent despite a new release, and several workflows use broad write permissions, so verify ongoing maintenance before adopting it widely.

Latest 5.0.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One of three workflows uses pull_request_target, which requires careful review because it can run with elevated repository context; no untrusted checkouts or script injection were detected.

Release history

The package has 34 releases over 822 days, but only 2 releases in the last 12 months; that recent slowdown is a maintenance concern despite the newly published 5.0.0 release.

Repo commit activity

No commits and no active maintainers were recorded over the last 3 months. The recent repository push and three merged pull requests partly offset this, but the lack of observed commit activity remains a meaningful maintenance concern.

Token permissions

One workflow omits top-level permissions and two workflows grant top-level write access, leaving broader automation privileges than necessary and increasing workflow-maintenance risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Fady Mondy

Direct Dependencies

Dependency	Last Release	Score
filament/filament Version ^5.0	—	—
tomatophp/filament-icons Version ^5.0	—	—
tomatophp/console-helpers Version ^1.1	—	—
lara-zeus/spatie-translatable Version ^2.0	—	—
tomatophp/filament-translation-component Version ^5.0	—	—