There is no repository security scanning, and both workflow actions are unpinned. A substantial README, tests, changelog, and matching MIT license improve transparency, but the project remains lightly established.
58%
Total Score
33
100
78
50
There were zero commits and zero active maintainers in the last three months, leaving little current evidence of maintenance capacity.
The repository is owned by an individual rather than an organization, so the small maintainer base is not offset by visible organizational backing.
Only two releases have been published, and the package is about 123 days old. This is limited evidence of long-term maintenance, despite the short interval between the first two releases.
There are no open issues or pull requests and no recent issue or pull request activity. This provides no evidence of community support or ongoing maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, though popularity alone is not required for a small package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.