The package has clear documentation, a substantial test suite, and security scanning in its build setup. Its alpha status, single publisher account, no commits in the last three months, and unpinned workflow actions make long-term maintenance and build reproducibility less certain.
62%
Total Score
50
100
83
50
The registry and repository are owned by the same individual account, so the package has identifiable project ownership. It is not organization-backed, which leaves less visible maintainer capacity.
The package is young, with 3 releases over 171 days and a median interval of about 4 days. That shows early release activity, but there is not yet a long maintenance record.
There were 0 commits and 0 active maintainers in the last 3 months. For a package this young, that is a caution about current maintenance capacity, though it does not by itself prove abandonment.
The repository has no security policy. This is a minor transparency gap for a package handling authenticated, database-backed tile endpoints.
All recent releases are prereleases, and this version is explicitly alpha. Consumers should expect unfinished behavior and possible breaking changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/cache Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.