The release includes tests, release notes, and no install-time scripts. Recent publishing and merged pull requests help, but the lack of commits in three months and workflow permission concerns warrant monitoring.
67%
Total Score
83
100
94
67
The repository records zero commits and zero active maintainers in the last three months. Although the release was published recently and pull requests were merged, this weakens confidence in continuing maintenance.
The repository has no stars, forks, or watchers. This is weak supporting evidence for maturity, but popularity alone does not outweigh the package's recent release and merge activity.
The repository has no published security policy. That reduces transparency for reporting and handling vulnerabilities in a package that exposes health information and integrates with several services.
All five workflows were analyzed without failures, with no untrusted checkout or script-injection findings. However, three workflows grant top-level write permissions and the audit found a high-confidence github-app issue where an app token inherits blanket installation permissions, creating a workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/log Version ^12.0 || ^13.0 | — | — |
illuminate/http Version ^12.0 || ^13.0 | — | — |
illuminate/mail Version ^12.0 || ^13.0 | — | — |
illuminate/cache Version ^12.0 || ^13.0 | — | — |
illuminate/queue Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.