A complete README, tests, and matching MIT license support adoption. The two workflows are fully analyzed but use five unpinned actions, and no security policy is provided.
62%
Total Score
50
88
50
This is the package's only release, published 167 days ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the past three months. Because the project is still young, this is limited maintenance evidence rather than proof of abandonment.
The linked repository has no security policy. This is a transparency gap for a package that runs migration-analysis tooling, though it does not by itself indicate abandonment.
Both workflows were analyzed without failed files or dangerous audit findings, and one scopes permissions at job level. However, all five action references are unpinned, leaving avoidable update and provenance risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/filesystem Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.