The license, README, release notes, and repository tests provide useful basics. It is a brand-new v0.0.1 with no demonstrated commit history, and all four workflow actions are unpinned.
55%
Total Score
50
69
75
This is the package's first release, published today, so there is no release track record to establish maintenance or stability.
The repository recorded zero commits and zero active maintainers in the last three months. Because the project was created and released today, this is limited evidence rather than proof of abandonment, but maintenance capacity is not yet demonstrated.
The linked repository name does not match the package name and its README does not mention this package, so the package-to-source relationship is less transparent even though the repository contains matching-looking project files.
The repository has zero stars, forks, and watchers. For a same-day first release this is expected, but it provides no independent evidence of adoption or community support.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version ^13.0 | — | — |
illuminate/http Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.