A single maintainer and no commits in the last three months limit confidence in ongoing maintenance. The workflows also use broad write permissions, leave all actions unpinned, and contain a high-confidence bot check warning; recent merged pull requests and release notes provide some counterweight.
54%
Total Score
63
100
94
75
The registry has one maintainer, leaving a thin publishing base for a package that does not have organizational backing.
The package and repository are owned by the same individual account, confirming direct ownership but providing no evidence of a broader maintenance organization.
Only two releases exist, with the latest about eight months ago, so the project has limited demonstrated release maturity and may be settling into inactivity.
The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance warning even though other repository activity is recent.
No security policy is present, which reduces transparency for reporting vulnerabilities in a package that extends framework data-pruning behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/events Version ^8.0|^9.0|^10.0|^11.0||^12.0 | — | — |
illuminate/console Version ^8.0|^9.0|^10.0|^11.0||^12.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0||^12.0 | — | — |
illuminate/database Version ^8.0|^9.0|^10.0|^11.0||^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.