Documentation, repository tests, release notes, and a clean workflow audit support adoption. Its single release, one-person ownership, absent security policy, and unpinned actions leave maintenance and build hygiene unproven.
64%
Total Score
50
100
88
75
Registry publishing is handled by one individual, and the repository ownership is also an individual account; this gives the project a thin apparent maintainer base.
The registry namespace and repository owner match, but both identify an individual rather than an organization, so there is no visible organizational backing to compensate for the thin maintainer base.
This is the first release, published today, so there is no history showing sustained maintenance or reliable release cadence.
There are no commits or active maintainers recorded in the last three months, but the package was released today, so this currently shows an unproven history rather than established abandonment.
Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable verification gap for a package handling reCAPTCHA integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.40 || ^13.0 | — | — |
illuminate/view Version ^12.40 || ^13.0 | — | — |
illuminate/routing Version ^12.40 || ^13.0 | — | — |
illuminate/support Version ^12.40 || ^13.0 | — | — |
illuminate/contracts Version ^12.40 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.