This release appears generally safe to depend on: it has a stable major version, a consistent release history with 7 releases in the last 12 months, an active and non-archived organization-owned repository, clear MIT licensing, and no install-time lifecycle scripts. The main concerns are limited recent repository activity (one commit in the last 3 months from one contributor), the absence of tests and a changelog, no security policy or security-scanning tooling, and very low repository popularity. These issues warrant monitoring, but the organization backing, recent release activity, matching repository, and small focused package structure keep the package in the healthy range.
78%
Total Score
60
100
83
90
Only one registry account has publish access, which is a supply-chain continuity concern, but this is partly offset by the organization-owned source repository and observed release activity.
A README is present and GitHub Releases are used, but neither the artifact nor the repository contains tests or a changelog. For a small readonly subtree split this is a real transparency and maintenance gap, although the release process provides some compensating evidence.
All recent repository commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown in this signal.
Only one commit was recorded in the last 3 months from one active maintainer, indicating thin recent development activity, though it is consistent with the package's recent release history.
There were no new or closed issues and no pull requests in the last month; this is limited evidence of community activity, but the open-issue count is unknown and the repository is a readonly subtree split.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moonshine/ui Version ^4.0 | — | — |
moonshine/core Version ^4.0 | — | — |
moonshine/support Version ^4.0 | — | — |
illuminate/support Version ^10|^11|^12|^13 | — | — |
moonshine/contracts Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.