Documentation, tests, and an MIT license make integration clearer. The single publisher and absent security policy leave limited operational assurance, while the project is still too new to demonstrate sustained maintenance.
68%
Total Score
50
100
88
75
Only one registry publisher, Boss, is listed, which gives the package a thin publishing base; repository ownership context does not provide evidence of a broader maintainer team.
The registry namespace is Boss while the linked repository is owned by the individual user verHsn, so the signals do not show organization backing or a broader support structure.
This is the first release, published 0 days ago, so there is no release history to demonstrate sustained maintenance; the package is simply too new for that evidence to exist.
The repository has 0 commits and 0 active maintainers in the last 3 months, but the package was released 0 days ago, so this is limited evidence of abandonment rather than a severe warning.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest assurance gap for a new package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.