Strong recent release and repository activity, with tests, security tooling, and a matching source repository. The Packagist abandonment flag and 15 unpinned workflow actions make this release a risky dependency despite otherwise solid project practices.
45%
Total Score
100
88
100
Packagist marks the entire package as abandoned, even though the listed replacement is the same package; this is a serious adoption and continuity warning that the active repository does not fully offset.
Both workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection; however, all 15 action references are unpinned, leaving avoidable action-supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/config Version ^12.0|^13.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.