Package Health

tomatophp/filament-translations-google

Usable with caveats: the package is well documented, tested, licensed, and backed by an active organization, but its release history is sparse and there were no commits in the last three months. Review its ongoing maintenance before making it a core dependency.

Latest 5.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Dangerous workflowscaution

One of three workflows uses pull_request_target, but no untrusted checkout or script injection was detected; this warrants review rather than a severe health penalty.

Release historycaution

Only 3 releases have been published across 688 days, with just 1 release in the last 12 months and a median interval of about 344 days; this is a meaningful sign of slow maintenance, though a recent release exists.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, which is the strongest maintenance concern; recent merged pull requests and the latest release provide only partial compensation.

Token permissionscaution

Two workflows request top-level write permissions and one lacks top-level permissions, including the Dependabot auto-merge workflow; this is a workflow-hygiene concern, though no direct exploitation pattern was detected.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Fady Mondy

Direct Dependencies

DependencyLast ReleaseScore
filament/filament
Version ^5.0
tomatophp/console-helpers
Version ^1.1
stichoza/google-translate-php
Version ^5.3
tomatophp/filament-translations
Version ^5.0

Weekly Downloads

Info

Last Published
5 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform