webard/filament-translatable
The repository includes tests, release notes, Dependabot, and recent commits. Workflow permissions and action pinning need attention; use happenv-com/filament-translatable instead.
43%
Total Score
100
88
50
Health Score Breakdown
Packagist marks the entire package as abandoned and names happenv-com/filament-translatable as its replacement, making this release a poor dependency target despite other healthy evidence.
The package runs a post-autoload-dump install-time script. This is an additional installation behavior to understand, but the provided signal does not show it as unsafe.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented for a package intended for application integration.
All five workflows were analyzed, but all 14 action references are unpinned, two workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bartlomiej Gajda |
| Happenv sp. z o.o. |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 filament/filament Version ^4.3.1|^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.