It includes a substantial test suite, release notes, an MIT license, and read-only workflow permissions. Pin this only after confirming it is the intended package rather than the much more established laravel/pail.
42%
Total Score
90
100
70
75
The package is identified as resembling laravel/pail, with borrows_lookalike_identity true and only 28 monthly downloads versus 9,454,869 for the lookalike; this is strong evidence of identity confusion even though artifact overlap is zero.
The package is only 1 day old with four releases and a median interval of about 6 hours, so there is too little history to establish durable maintenance or release stability.
All three recent commits came from one contributor, leaving a narrow maintenance base despite organization backing.
The repository has no stars, forks, or watchers; this is weak supporting evidence for maturity, though popularity alone is not decisive.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.