It has clear licensing, tests, release notes, and regular releases over about two and a half months. The single-contributor base, absent security policy, and unpinned Actions references leave meaningful maintenance and build-integrity caveats.
67%
Total Score
50
100
88
75
The repository is owned by an individual account rather than an organization, which does not provide additional maintenance handoff evidence and reinforces the single-contributor concern.
Four releases in about two and a half months, with a median interval of about six and a half days, show active early development. The short history still provides limited evidence of long-term maintenance.
One contributor owns 100% of the recent commits, creating a meaningful single-person continuity risk. The repository is user-owned, so there is no organization backing shown to compensate for that concentration.
Eight commits in the last three months show ongoing work, but all activity comes from one active maintainer, limiting evidence of durable maintenance capacity.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest transparency and maintenance gap for a package handling roles and permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.