Usable with caveats: this is a newly published 0.1 package with no demonstrated maintenance history and a README that is still a template. It has a matching repository, a license, simple dependencies, and no install scripts, but its long-term reliability is unproven.
55%
Total Score
50
100
79
75
A single registry publisher is consistent with a small personal package, but it provides limited maintainer redundancy for a package with no established history.
The package includes a README and has a GitHub release for this version, but the README remains largely a template with usage marked “will be written soon.” Missing tests and a changelog are normal for a published artifact and are not negative evidence here.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is no organizational backing to offset the single-maintainer profile.
The package is 0 days old with only one release, so there is no release track record or evidence of sustained maintenance yet.
There were no commits and no active maintainers in the preceding three months. Because the package is brand new, this mainly means sustained maintenance is unproven rather than demonstrating a long-term collapse.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.