The package is clearly identified, MIT-licensed, and has a useful README plus a GitHub release. Its small, young project footprint warrants pinning v1.0.1 and monitoring future maintenance.
61%
Total Score
50
100
80
75
The repository is owned by an individual user rather than an organization, and the observed repository activity is concentrated in one contributor. There is no organizational backing shown to offset that concentration.
The package is only 82 days old and has two releases, both published within about one day. This shows initial activity but provides little evidence of long-term maintenance.
One contributor made all four commits in the last three months, giving the project a fully concentrated maintenance base and increasing abandonment or handoff risk.
The repository has four commits in the last three months, showing some recent maintenance, but the activity level is still limited for a package intended for application integration.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to compensate for the project's short history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.