Tests, release notes, licensing, and a security policy provide useful project transparency. The workflows are broadly clean, although an archived action and unpinned references add maintenance risk.
55%
Total Score
75
94
100
The package has four releases, but the latest was over three years ago and there were no releases in the last 12 months, indicating stale maintenance.
There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence that current maintenance has stopped or become very limited.
All four workflows were analyzed without untrusted checkouts or script injection, but all 14 action references are unpinned and one high-confidence medium-severity finding uses an archived action, creating avoidable workflow maintenance risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.46 | — | — |
illuminate/database Version ^9.46 | — | — |
illuminate/collections Version ^9.46 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.