The project includes tests, release notes, a clear license, and security scanning. Its single-user ownership, zero repository adoption, no commits in three months, and unpinned workflow actions warrant continued caution.
61%
Total Score
50
100
89
100
One registry maintainer is consistent with an independently owned package, but it leaves limited visible publishing capacity if that person becomes unavailable.
The repository is owned by an individual rather than an organization, so there is no demonstrated organizational continuity to offset the thin maintainer base.
The package is 174 days old but has only two releases, both published on the same day, so its long-term release cadence is not yet demonstrated.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful warning about current maintenance continuity despite the recent push timestamp.
There are two open pull requests and one new pull request in the last month, showing some interaction, although none were merged during that period.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/view Version ^12.0|^13.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.