The package includes a clear README and license, while the repository has a security policy, dependency scanning, and pinned workflow actions. Its maintenance track record is unproven because it was released today and has no recorded recent commits; the workflow also grants top-level write access.
64%
Total Score
50
100
94
83
The package is backed by a matching individual repository owner rather than an organization; this does not indicate a problem, but it means there is no shown organizational maintenance capacity.
This is the first recorded release, published today, so there is no release history or cadence demonstrating sustained maintenance.
The repository has no commits recorded in the last three months and no active maintainers in that period; because the project was released today, this mainly reflects limited history rather than proven abandonment.
All workflows were analyzed successfully, all three action references are pinned, and no audit findings or untrusted-code sinks were reported. One workflow grants top-level write permissions, which is broader than necessary and is a mild hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0||^13.0 | — | — |
illuminate/view Version ^12.0||^13.0 | — | — |
illuminate/console Version ^12.0||^13.0 | — | — |
illuminate/routing Version ^12.0||^13.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.