The repository has tests, a clear README, and a matching MIT license. Its small release history, absent security policy, and unpinned workflow actions leave maturity and maintenance practices less established.
70%
Total Score
100
83
75
This package is only 50 days old and has one release, so its maintenance record and compatibility history are still unproven. Recent repository activity partly offsets the limited history.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package that integrates with an external service.
Version 0.1.0 is an early non-stable-major release, which signals that APIs may still change. It is not marked as a prerelease, so this is a maturity concern rather than a release warning.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 3 action references are unpinned. That weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
datalumo/php Version ^0.1.0 | — | — |
illuminate/bus Version ^11.0|^12.0|^13.0 | — | — |
illuminate/view Version ^11.0|^12.0|^13.0 | — | — |
illuminate/queue Version ^11.0|^12.0|^13.0 | — | — |
illuminate/console Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.