The package includes tests, a useful README, and a small dependency surface. Its workflow uses read-only job permissions, but all three actions are unpinned.
62%
Total Score
75
100
83
100
The package is only 123 days old and all four releases occurred within minutes on the same day, leaving no demonstrated release cadence after its initial launch.
The repository recorded zero commits and zero active maintainers in the last three months, which provides no evidence of ongoing maintenance beyond the initial release period.
The assessed version is 1.0, while the registry reports the latest version as v0.0.3 and the project is not at a stable major release stage; this makes maturity and version expectations unclear.
The workflow audit completed cleanly and found read-only permissions with no untrusted checkout or script-injection paths. However, all three analyzed action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
illuminate/validation Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.