The package includes a useful README, tests, an explicit MIT license, and no install-time scripts. Its small dependency set and matching repository are reassuring, but the project has not shown follow-up development or security-policy coverage.
58%
Total Score
50
100
81
75
One registry maintainer is consistent with an individual-owned project, but it leaves little visible maintainer capacity if that person stops working on it.
The repository is owned by the same individual namespace as the package rather than an organization, so the single-maintainer concern is not offset by organizational backing.
This is the only release, published about 5 months ago, so there is not enough release history to demonstrate sustained maintenance.
There were no commits and no active maintainers during the last 3 months, which is a meaningful maintenance concern for a package still at version 0.0.1.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any adoption signal provides no external reassurance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.