Clear documentation, tests, licensing, and security tooling reduce adoption friction. Its small release history leaves limited evidence of long-term maintenance, so pin this version and watch future releases.
68%
Total Score
67
100
88
100
The package is only 46 days old and all four releases were published on the same day, so there is limited evidence of sustained maintenance over time.
One contributor owns 100% of the three recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce concentration risk.
There were three commits in the last three months, all from one active maintainer; this shows some activity but provides only limited maintenance depth.
Version v0.2.1 is not a stable major release, which signals an API that may still change even though it is not marked as a prerelease.
The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings; however, both action references are unpinned, leaving avoidable supply-chain drift risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.