The package includes a substantial README, repository tests, release notes, and a security policy. It is not deprecated, and its audited workflow uses read-only permissions with pinned actions.
68%
Total Score
67
94
100
The repository is owned by an individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package is only 46 days old with three releases and a median interval of about 23 days, so its maintenance record is still too short to establish long-term stability.
All eight recent commits came from one contributor, leaving maintenance highly dependent on a single person despite the current activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0|^5.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
openspout/openspout Version ^4.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.