Clear licensing, extensive tests, and release notes improve confidence for maintainers. All workflow actions are unpinned, one audit file failed, and no security policy is published.
84%
Total Score
100
94
75
The repository has only 2 stars and no forks, limiting independent adoption evidence, but popularity is outweighed by its recent release and contributor activity.
No repository security policy is published, leaving vulnerability reporting expectations unclear even though security scanning is present.
All 9 analyzed action references are unpinned, and one workflow file failed auditing; there were no detected injection sinks or high-severity findings, so this is a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11|^12|^13 | — | — |
illuminate/cache Version ^11|^12|^13 | — | — |
illuminate/console Version ^11|^12|^13 | — | — |
illuminate/support Version ^11|^12|^13 | — | — |
illuminate/database Version ^11|^12|^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.