Release notes, repository tests, and six releases in the last year support a maintained project. The empty three-month commit window and unpinned workflow actions make ongoing maintenance and build integrity less reassuring.
70%
Total Score
83
100
100
75
The repository recorded zero commits and zero active maintainers in the last three months. Although releases and pull-request merges show recent activity, the missing commit activity lowers confidence in ongoing maintenance.
The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself make the release unfit.
All four workflows were analyzed with no reported audit findings or untrusted checkouts, but all 12 action references are unpinned and two workflows grant top-level write permissions. The unpinned actions are a meaningful build-integrity hygiene concern; the write permissions are a milder concern without an untrusted trigger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.