The package includes tests, a clear README, an MIT license, and a GitHub release. Its short release history, no recent commits, absent security scanning, and unpinned workflow actions leave long-term maintenance and build hygiene unproven.
64%
Total Score
50
80
50
The package has only two releases, both within about four days, and its release history is roughly four months old. This is too little history to establish durable maintenance, despite the recent initial activity.
The repository had no commits and no active maintainers during the last three months. With only a short release history, this leaves ongoing maintenance capacity unproven.
Composer build tooling is present, but no security scanning tools were detected. For a small package this is a hygiene gap, not evidence that the release is unsafe.
The only workflow was fully analyzed and had no untrusted triggers, checkout sinks, or audit findings. However, both action references are unpinned, which weakens reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=9.0 | — | — |
illuminate/database Version >=9.0 | — | — |
illuminate/pagination Version >=9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.