Package Health/tomatophp/filament-media-manager

tomatophp/filament-media-manager

Usable with caveats: the package is actively released, licensed, tested, and backed by a matching organization repository. However, no commits or active maintainers were recorded in the last three months, and its workflows use broad write permissions with a pull-request target workflow.

Latest 5.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

Maturity

100

Supply Chain

Health Score Breakdown

Dangerous workflows

One of three workflows uses pull_request_target, which requires careful handling of untrusted pull requests; no untrusted checkout or script-injection patterns were detected, limiting the concern.

Dependency profile

Six runtime dependencies, including Filament, Laravel Media Library, and related TomatoPHP components, create meaningful compatibility and maintenance coupling, though the profile is not unusually large for this integration package.

Repo commit activity

No commits and no active maintainers were recorded during the last three months, which is a real maintenance-continuity concern despite the recent releases and merged pull requests.

Token permissions

Two workflows declare top-level write permissions and one workflow lacks top-level permissions, leaving broader-than-necessary automation access as a transparency and containment concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Fady Mondy

Direct Dependencies

Dependency	Last Release	Score
filament/filament Version ^5.0	—	—
tomatophp/filament-icons Version ^5.0	—	—
tomatophp/console-helpers Version ^1.1	—	—
spatie/laravel-medialibrary Version ^11.13	—	—
filament/spatie-laravel-media-library-plugin Version ^5.0	—	—