The repository has tests, a security policy, matching package documentation, and a real organization behind it. Recent maintenance is quiet, with no commits in three months, and all five workflow actions are unpinned.
68%
Total Score
83
100
94
100
The package is mature, with 43 releases over about five and a half years, but only one release in the last 12 months indicates a slower current cadence.
No commits and no active maintainers were observed in the last three months, which is a meaningful maintenance concern despite the recent release.
Both workflows were fully analyzed with no dangerous audit findings or untrusted checkouts, but all five action references are unpinned, leaving avoidable workflow supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/view Version ^10.0|^11.0|^12|^13 | — | — |
vlucas/phpdotenv Version ^5.4.1 | — | — |
illuminate/support Version ^10.0|^11.0|^12|^13 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12|^13 | — | — |
illuminate/validation Version ^10.0|^11.0|^12|^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.