illuminate/notifications

The package is licensed, stable, and backed by an organization with a long release history. Missing security scanning and an unpinned workflow reference leave modest maintenance and build-hygiene concerns.

Latest v13.33.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog, and the repository also reports none. The missing consumer documentation is a modest transparency gap, while tests and changelogs are not expected in every published artifact.

Repo commit activity

The repository records zero commits and zero active maintainers over the last three months, which weakens evidence of ongoing development despite the recent release and push timestamps.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected. This is a modest project-hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy, reducing transparency around vulnerability reporting and response expectations.

Workflow audit

The sole workflow is fully analyzed and has no reported audit findings; its pull_request_target trigger has no untrusted checkout or script-injection sink. However, its one action reference is unpinned, leaving a minor supply-chain hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Taylor Otwell

Direct Dependencies

Dependency	Last Release	Score
illuminate/bus Version ^13.0	—	—
illuminate/mail Version ^13.0	—	—
illuminate/queue Version ^13.0	—	—
illuminate/support Version ^13.0	—	—
illuminate/container Version ^13.0	—	—