Clear documentation, tests, release notes, and a matching repository make the package easy to evaluate. Its unpinned workflow actions and absent security policy leave modest maintenance and build-hygiene concerns.
68%
Total Score
50
83
50
This is the first release, published less than a day ago, so there is no track record of sustained maintenance or compatibility across releases.
The repository has no commits or active maintainers recorded over the past three months; because the project is newly published, this is limited evidence rather than proof of abandonment.
The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented for a package intended for application use.
v0.1.0 is not a stable major release, which increases the likelihood of breaking changes while the package establishes its API.
The single workflow was fully analyzed without dangerous triggers or audit findings, but all four action references are unpinned, weakening reproducibility and update control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
beberlei/metrics Version ^3.0 | — | — |
illuminate/routing Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.