Usable with caveats: it has a long release history, frequent recent releases, matching source code, tests, and a current repository. The main concern is no recorded commits or active maintainers in the last three months, alongside modest workflow security and documentation gaps.
72%
Total Score
75
100
94
80
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this leaves a relatively thin publishing base, although release history shows the account has been active.
The repository records 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern despite a recent push and frequent registry releases.
The repository has only 3 stars, 0 forks, and 1 watcher. Low adoption is supporting caution rather than a decisive health problem, since other signals show sustained releases and repository structure.
The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it does not by itself indicate abandonment.
One workflow lacks top-level permissions and another grants top-level write access, leaving workflow privileges less tightly constrained than ideal. This is a workflow-hygiene concern, not a health verdict on the package itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.