The package includes substantial documentation, tests, changelog, and a matching source repository. Its same-day release history and no observed commit activity leave maintenance unproven, while both workflow actions are unpinned.
62%
Total Score
50
100
79
88
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This does not establish broad project backing.
The package is new, with two releases published on the same day and no established release interval. That makes long-term maintenance and release discipline unproven.
The repository shows zero commits and zero active maintainers over the last three months. Because the package is only a few hours old, this is partly explained by its freshness, but ongoing maintenance is not yet demonstrated.
Composer build tooling is present, but no security scanning tool was detected. This is a modest repository hygiene gap rather than evidence of unsafe code.
Version v0.1.1 is not on a stable major version, so the API may still change substantially even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/database Version ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.