Documentation is substantial, with tests, a changelog, a security policy, and matching repository references. The workflow audit found both action references unpinned, so build reproducibility remains weaker than the otherwise solid project structure.
60%
Total Score
83
100
89
88
The package is 0 days old and has 9 releases all published on the same day, so there is not yet evidence of sustained release maintenance or long-term stability.
All 292 recent commits came from one contributor, leaving maintenance dependent on a single individual with no demonstrated handoff capacity.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its 2 action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^10.0|^11.0|^12.0 | — | — |
illuminate/queue Version ^10.0|^11.0|^12.0 | — | — |
illuminate/events Version ^10.0|^11.0|^12.0 | — | — |
illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.