The package includes tests, documentation, and a matching MIT license, while its small dependency set keeps integration straightforward. Pin this version and expect to maintain it locally.
58%
Total Score
50
100
92
75
The package is about 5 years and 5 months old, with only 3 releases and none in the last 12 months; the last release was April 2021. This is a substantial maintenance concern, though the repository is not archived.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the long release gap and indicating little current maintenance capacity.
There were no new or closed issues or pull requests in the last month, and 3 issues plus 1 pull request remain open. This supports the picture of an inactive project.
The repository has no security policy. For a small package this is a transparency gap, although the available tests, license, and matching repository provide some compensating project evidence.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 3 action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version 7.*|8.* | — | — |
illuminate/support Version 7.*|8.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.