It has clear licensing, tests, documentation, and no install-time scripts. The repository is active and organization-backed, while unpinned workflow actions and no security policy leave modest maintenance and supply-chain gaps.
80%
Total Score
100
90
75
The package is only 50 days old, despite 11 releases and activity roughly every 4 hours, so release momentum is strong but long-term maintenance is not yet demonstrated.
No repository security policy was found. That is a modest transparency gap for an authentication package, even though it does not by itself show abandonment.
All 3 workflows were analyzed successfully with no dangerous findings or broad top-level write permissions. However, all 3 of 3 action references are unpinned, leaving a reproducibility and action-supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
liberusoftware/identity-core Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.