The package is small and clearly licensed, with a focused dependency set and release notes for this version. Its single registry publisher and absent security policy leave less operational transparency, although organization backing and the read-only subtree explain the sparse repository.
68%
Total Score
75
100
100
83
The repository recorded 0 commits and 0 active maintainers over the last 3 months, which is a maintenance concern. The read-only subtree and organization backing partly explain why work may occur elsewhere, but they do not fully replace observed activity for this package.
The linked repository has no security policy. This is a transparency and incident-reporting gap, though it is a hygiene concern rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moonshine/support Version ^4.0 | — | — |
illuminate/support Version ^10|^11|^12|^13 | — | — |
moonshine/contracts Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.