This release appears suitable to depend on: it is a stable major release from an actively maintained package with 18 releases over 587 days, including 10 in the last 12 months, and the repository was updated very recently. The source repository matches the package and documents it, contains tests and a changelog even though those are not included in the artifact, and uses automated dependency updates plus read-only workflow permissions. The main risks are concentration around one maintainer, very limited repository adoption, and the absence of a security policy; these reduce resilience and transparency but do not indicate abandonment or make the package unfit to use.
82%
Total Score
70
100
94
90
Only one registry account has publish access. This is a resilience concern, though the linked repository is user-owned and the source activity confirms that this maintainer is actively contributing.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational maintenance or handoff capacity.
One contributor made all six commits in the last 3 months, creating a clear single-person continuity risk; unlike an organization-owned project, no organizational backing is shown to mitigate it.
The repository has only 1 star, 0 forks, and 1 watcher. Low popularity is supporting caution about external validation, but it is not by itself evidence of abandonment.
No security policy was found in the repository, leaving vulnerability-reporting expectations and response procedures undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^3.10 | — | — |
illuminate/http Version ^13.0 | — | — |
illuminate/events Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.