The repository has tests, a changelog, security policy, and fully pinned workflow actions. It is a young prerelease with limited release history, so expect API changes and verify ongoing support.
64%
Total Score
67
88
75
The package runs a post-autoload-dump install-time script. This is an additional installation behavior to review, though the signal alone does not establish a health or supply-chain failure.
The package is only 50 days old with two releases, the latest about 3 days after the first. That is too little history to demonstrate sustained maintenance.
One contributor made all five commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is evidenced.
The repository has five commits in the last three months, showing recent activity but only a small maintenance volume. This provides some support against abandonment without demonstrating a mature maintenance cadence.
The assessed release is v0.1.0-beta.2, and all recent releases are prereleases. This indicates an immature API and a higher likelihood of breaking changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0 || ^13.0 | — | — |
illuminate/queue Version ^12.0 || ^13.0 | — | — |
illuminate/console Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/database Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.