The project has clear documentation, tests, licensing, and recent work from two contributors. Its beta maturity, sparse release history, absent security policy, and entirely unpinned workflow actions warrant extra care for production use.
68%
Total Score
100
75
50
Only two releases exist across roughly 153 days, with both released within minutes of each other; this provides limited evidence of an established release cadence.
The repository has two stars, no forks, and one watcher. Low adoption is supporting evidence of limited maturity, but it is not decisive because popularity is not a health verdict.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that handles queued messages and database-backed application behavior.
This is a beta prerelease and all recent releases are prereleases, so the API and behavior may still change before a stable release.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.