This is a small, clearly identified MIT-licensed package backed by an organization-owned repository, with matching package references, a changelog, recent release activity, and no deprecation or install-time scripts. However, its maintenance cadence is sparse—only one release in the last 12 months, a median release interval of about 345 days, and no commits or active maintainers in the last 3 months—and the repository has no tests, security policy, or security scanning. It is usable for a focused dependency, but adopters should account for the thin maintenance and verification signals.
68%
Total Score
83
50
72
90
Six runtime dependencies, including framework components and spatie/valuestore, create meaningful compatibility surface area, but the profile is coherent with the package's stated cached valuestore integration.
A README and changelog are present and GitHub Releases are used, but neither the artifact nor repository contains tests; for a small package this is a genuine verification gap.
The package has existed for about 5 years and 10 months with 9 releases, but only one release in the last 12 months and a median interval of about 345 days indicate a slow maintenance cadence.
There were 0 commits and 0 active maintainers in the last 3 months, a concrete sign of currently thin maintenance activity; the recent release and repository push provide only partial compensation.
The repository has 0 stars and 2 forks; this supports a small-project interpretation but provides little independent evidence of broad community validation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/queue Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/events Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
spatie/valuestore Version ^1.0 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/container Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.