The repository has strong test coverage and clear release notes, while all six workflow actions are unpinned and one release step installs outside a lockfile. Pin this version if its Laravel support matches your application.
65%
Total Score
50
100
83
67
Only one account has registry publish access, leaving a thin publishing base. The repository is user-owned rather than organization-owned, so there is no provided backing signal to offset that concentration.
The registry namespace and repository owner match, but the owner is an individual account. This supports package identity while providing no organizational maintenance cushion.
The package is young at 159 days and has four releases, but all releases occurred within its first few weeks and none followed the May 8 release. This leaves maintenance continuity uncertain.
There were zero commits and zero active maintainers in the last three months; the latest push was about four months ago. This is the strongest evidence of currently inactive maintenance.
The repository has one star, no forks, and no watchers. Low popularity is supporting evidence rather than a health verdict, but it provides little evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.