The repository includes tests and a clear README, but its single maintainer and unpinned workflow actions reduce confidence. Licensing and package identity are clear, while the project is too new to demonstrate sustained maintenance.
67%
Total Score
50
100
86
67
Only one registry publishing account is listed, leaving limited visible publishing redundancy for a new package.
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.
This is the first release, published today, so there is no release track record or demonstrated long-term maintenance yet.
The repository has no commits or active maintainers recorded in the last three months; because the package is brand new, this is mainly an unproven maintenance history rather than evidence of abandonment.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest repository-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/queue Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.