The repository has tests, a security policy, and a clear package match, which support maintainability. Release activity is limited and all 14 workflow actions are unpinned, so pin this version only with continued maintenance checks.
57%
Total Score
75
90
100
The package is about 13 months old with only 3 releases and 1 release in the past 12 months. Its roughly 30-day median release interval shows an initially regular cadence, but recent activity is limited.
There were 0 commits and 0 active maintainers in the past 3 months, indicating recently stalled development; the repository was pushed around the latest release, which provides limited compensation.
All 14 analyzed action references are unpinned, creating avoidable workflow supply-chain drift. The audit found no untrusted checkouts, script injection, dangerous triggers, or other findings, which keeps this as a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0 | — | — |
illuminate/database Version ^12.0 | — | — |
illuminate/contracts Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.