Clear documentation, licensing, tests in the repository, and a recent stable release support adoption. Maintenance has gone quiet since the release, and the workflow uses an unpinned action, so pinning this version is preferable.
72%
Total Score
88
100
94
75
The package is mature at about 6 years old with 16 releases, but only one release in the last 12 months indicates a slow cadence. The latest release is recent enough to provide some support for continued maintenance.
There were no commits or active maintainers in the three months before collection. Although the release itself was recent, this lack of ongoing activity is a maintenance concern.
No repository security policy was found. This is a minor transparency gap for reporting vulnerabilities, but it does not by itself indicate abandonment.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Its only action reference is unpinned, which leaves the build exposed to reference changes and is a modest hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.