tomatophp/filament-users
Usable with caveats: it is a licensed, well-structured package with active releases and organization backing, but repository commits have stopped recently and its automation grants broad write access. Review the project before adopting it for critical systems.
72%
Total Score
88
100
100
80
Health Score Breakdown
One of three workflows uses pull_request_target for Dependabot auto-merge, which warrants review because that workflow type can carry elevated trust implications; no untrusted checkouts or script injections were detected.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning even though the registry shows a recent release and the repository was recently pushed.
Two workflows declare top-level write permissions and the tests workflow has no top-level permissions declaration, leaving automation access broader or less explicit than ideal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fady Mondy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^5.0 | — | — |
tomatophp/console-helpers Version ^1.1 | — | — |
lab404/laravel-impersonate Version ^1.7 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.