It includes an MIT license, focused dependencies, tests, and release notes. Organization backing and read-only workflow permissions help, but maintenance capacity is not yet demonstrated and workflow actions are unpinned.
68%
Total Score
75
100
93
50
The package is less than 1 day old with only 2 releases, so it has not yet demonstrated sustained maintenance or release reliability.
The repository records 0 commits and 0 active maintainers in the last 3 months. Because the package was created less than 1 day ago, this is mainly an absence of track record rather than evidence of a collapsed project.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a modest transparency gap for a new library.
The workflow audit completed cleanly and found read-only permissions with no untrusted checkouts or injection findings, but both of its 2 action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
illuminate/validation Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.