It includes tests, a substantial README, an MIT declaration, and release notes for this version. Its small dependency set and lack of install hooks reduce operational friction.
58%
Total Score
50
100
92
50
Six releases arrived during the first 179 days, but the latest release was followed by roughly five months without another release. That short, bursty history leaves long-term maintenance uncertain.
No commits and no active maintainers were observed during the last three months. For a package released only a few months earlier, this is a meaningful maintenance concern.
The repository has no security policy. This is a transparency gap, though it is less serious for a small scaffolding package than for security-sensitive infrastructure.
All three workflow action references are unpinned, and the audit reported a low-confidence cache-poisoning pattern. The audit was complete, but these remain workflow hygiene weaknesses rather than severe evidence on their own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.