Documentation is extensive, licensing is clear, and the repository has tests and security reporting. The rapid release history and unpinned workflow actions warrant checking future maintenance before standardizing on it.
72%
Total Score
100
86
75
The package is only 1 day old, with 4 releases in that period and a median interval of about 6 hours. This shows active initial work but provides almost no evidence of sustained maintenance.
v0.4.0 is not marked as a prerelease, but the package remains on a pre-1.0 major version and has only just launched. Compatibility and long-term stability are therefore not yet demonstrated.
All 5 workflows were analyzed without high- or medium-severity findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain protection.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
illuminate/http Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.