The package includes repository tests, release notes, a security policy, and a clear README. Both workflow action references are unpinned, and the project has no established commit history yet; reassess after maintenance activity develops.
68%
Total Score
75
100
86
83
This package was published today and has only one release, so there is no demonstrated release cadence yet. That is expected for a new project but leaves maintenance maturity unproven.
The repository recorded zero commits and zero active maintainers in the last three months. Because the project is newly published, this is partly explained by its age, but ongoing maintenance is not yet demonstrated.
The release is v0.1.0 rather than a stable major version, which indicates an early API and maturity stage. It is not marked as a prerelease, providing some compensation.
The workflow audit completed fully with read-only permissions and no dangerous findings or untrusted checkouts. However, both action references are unpinned, leaving the build exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/collections Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.