Healthy for an early-stage package, with clear documentation, tests, licensing, and active development. It is only 9 days old, remains below 1.0, has no security scanning or policy, and has little community adoption, so use it with normal release-risk caution.
78%
Total Score
67
100
78
90
The registry namespace and repository are owned by the same individual, providing direct ownership continuity, although there is no organization backing to reduce dependence on that maintainer.
Seven releases in the first 9 days show active iteration, but the very short history provides little evidence of long-term maintenance or release stability.
Two contributors are active, but one accounts for about 71% of recent commits, leaving meaningful concentration risk for a small user-owned project.
The repository has zero stars, forks, and watchers, so there is no community adoption evidence to supplement the package's brief maintenance history.
Composer is used as a build tool, but no security scanning tools are configured. The missing scanner is a transparency gap, though it is not by itself evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.