The package includes tests, clear documentation, and a matching license, while its organization-backed project has continued releasing updates. Recent repository work is concentrated in one contributor, and workflow permissions and action pinning need tightening.
82%
Total Score
70
100
94
83
All recent commits come from one contributor, creating concentration risk; organization ownership provides some handoff capacity but no second active contributor is shown.
Only two commits were recorded in the last three months, so current development activity is light despite the recent release.
The repository has only two open issues and one open pull request, with no recent monthly activity recorded; this is a small caution, but the recent release history is stronger evidence of maintenance.
The project uses Make and Composer, but no security scanning tool was detected, leaving a modest security-process gap.
The repository has no published security policy, which makes vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.