The release is licensed, documented, tested, and backed by a repository that matches the package. A single maintainer and no security-scanning tooling reduce resilience for a package handling exchange credentials.
67%
Total Score
38
100
88
83
The repository recorded zero commits and zero active maintainers in the past three months. For a package this young, that is a meaningful warning that maintenance may have stopped after the initial release.
Only one account has registry publish access. That is a limited operational base for an individually owned project and increases continuity risk if the maintainer becomes unavailable.
The package and repository are both owned by the same individual account, so the source ownership is consistent, but there is no organization backing to offset the limited maintainer base.
The package is only 107 days old and has two releases, with a median interval of about two days. This shows an initial modernization effort but provides limited evidence of sustained maintenance.
There is one open issue and no issues or pull requests were opened or closed in the past month. This is limited activity, but the small project size makes it only a mild concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.