Clear documentation and a documented security process add useful context. The repository shows sustained work, balanced recent contributions, and careful workflow configuration, with only an install-time script and a small maintainer base limiting the margin.
91%
Total Score
88
100
83
The package runs a post-autoload-dump install-time script. This is a mild supply-chain and installation review point, but the signal does not show dangerous behavior by itself.
The package and repository are owned by the same individual account. This provides clear ownership, though it does not offer the handoff capacity of organization backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/events Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
illuminate/notifications Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.