The package has clear documentation, tests, matching source, and an MIT license. Its single release and zero commits in the last three months leave maintenance unproven, while workflow actions are unpinned.
62%
Total Score
50
100
75
83
One registry maintainer is consistent with the linked repository being owned by an individual, but it leaves a limited apparent publishing base.
The registry namespace and repository are owned by the same individual, so the package's source ownership is consistent, but there is no organizational backing to offset the narrow maintainer base.
This is the only release, published 160 days ago, so there is little release history from which to judge sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, making ongoing maintenance uncertain for a package with only one release.
There are no open issues or pull requests and no activity in the last month; this is neutral for a small new package but offers no evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/notifications Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.