The project was released today, so there is no track record yet; its repository has no recent commits beyond the initial release. Tests, documentation, licensing, and a clean workflow audit help, but the workflow leaves both action references unpinned and the repository has no security policy.
62%
Total Score
50
100
81
67
The repository is owned by an individual account rather than an organization, so the thin observable project history is not compensated by organizational backing.
This is the package's first release, published today, with only one release and no release history to demonstrate sustained maintenance or stability.
The repository shows zero commits and zero active maintainers in the prior three months, but the package was only released today, so this mainly reflects insufficient history rather than proven abandonment.
The repository has zero stars, forks, and watchers. For a package released today this is expected, but it provides no independent evidence of adoption or community support.
Composer build tooling is present, but no security-scanning tool is configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.2 || ^8.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.