The project is clearly packaged, documented, tested, and covered by a security policy. Its release history is too new to establish long-term maintenance, and both workflow actions are unpinned.
82%
Total Score
88
100
89
88
Only two releases appeared on the same day, so the package has not yet demonstrated sustained maintenance over time.
No commits or active maintainers were recorded in the last three months, but the package itself is only hours old, so this is limited evidence rather than abandonment.
The repository has only 2 stars and 2 forks, showing limited adoption, but popularity is supporting evidence and the package is brand new.
The workflow uses read-only permissions and had no audit findings, but both action references are unpinned, leaving them exposed to future upstream changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
illuminate/validation Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.