The package is well documented, licensed, and backed by repository tests, release notes, and security guidance. A single registry maintainer and no recorded commits in three months reduce long-term resilience, while workflow dependencies need pinning.
78%
Total Score
50
100
100
75
The registry namespace and repository owner match, but the project is owned by an individual rather than an organization, so its continuity depends more heavily on one maintainer.
No commits and no active maintainers were recorded during the last three months, which weakens evidence of ongoing maintenance despite recent releases and merged pull requests.
All six workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script injection; however, all 18 action references are unpinned, leaving them exposed to moving upstream code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/queue Version ^11.0|^12.0|^13.0 | — | — |
illuminate/events Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/notifications Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.