Tests, release notes, licensing, and security tooling provide a solid foundation. Maintenance has slowed substantially, and the workflows contain a high-confidence unpinned container image.
67%
Total Score
75
100
94
100
The package has six releases since December 2021, but none in the 12 months before collection and the latest registry release was in April 2024. This indicates materially slowed maintenance for a library dependency.
There were no commits and no active maintainers in the three months before collection. Although the repository was pushed in November 2025, the recent activity gap remains a maintenance concern.
There were no new or closed issues or merged pull requests in the last month, though two pull requests remain open. This is weak evidence of current maintenance activity.
All four workflows were analyzed and have no untrusted checkout or script-injection findings, but all 10 action references are unpinned and a high-confidence audit found an unpinned container image. This is a real workflow supply-chain hygiene weakness, though not severe enough alone to make the package unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0 | — | — |
illuminate/routing Version ^10.0|^11.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
illuminate/database Version ^10.0|^11.0 | — | — |
illuminate/validation Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.