Workflow dependencies are all unpinned, and the repository reports no security-scanning tooling. Clear documentation, tests, a changelog, and an explicit license reduce adoption friction.
62%
Total Score
50
50
79
100
Twelve runtime dependencies, including several Laravel components and the core SDK, reflect a framework bridge with meaningful integration surface rather than an unusually minimal package.
Registry publishing is handled by one individual, which leaves a limited visible publishing base; the linked repository is also user-owned rather than organization-backed.
The registry namespace and repository owner match, but both identify a single user rather than an organization, so there is limited evidence of broader project backing.
The package is only 100 days old with two releases, both published within the initial day; this shows early activity but provides little long-term maintenance evidence.
The repository has no commits and no active maintainers in the last three months. Given the package's 100-day age, this is a meaningful but not yet conclusive maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/cache Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/queue Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/events Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/console Version ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.