Documentation is substantial, licensing is clear, and repository tests, security scanning, and a security policy are present. The project has not yet demonstrated sustained maintenance or community adoption, so pinning this early release merits care.
70%
Total Score
50
81
100
The package and repository are owned by the same individual account, which is consistent ownership but does not provide organizational backing or a broader maintainer base.
The package was released only once, on September 30, 2026, and is 0 days old, so there is no release cadence or history demonstrating sustained maintenance.
The repository has 0 commits and 0 active maintainers in the last 3 months, but the package is only 0 days old, so this is limited evidence rather than proof of abandonment.
The repository has 0 stars, forks, and watchers. For a package released 0 days ago this is unsurprising, but it provides no independent evidence of adoption or review.
v0.1.0 is not a stable major release, which indicates an early API and greater likelihood of breaking changes despite not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/validation Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.