The workflow uses seven unpinned actions and the repository has no automated security scanning. Clear documentation, tests, a matching repository, and release notes provide useful transparency, but the single-release history leaves maintenance capacity unproven.
62%
Total Score
50
100
83
83
The package and repository are owned by the same individual account, which is consistent with a personal project but provides less organizational maintenance redundancy than backed projects.
This is a young package with one release, first published 209 days ago, and no subsequent release activity. That leaves its maintenance trajectory unproven rather than demonstrating abandonment on its own.
There were zero commits and zero active maintainers in the last three months. For a package with only one release, this is a meaningful warning that ongoing maintenance has not yet been demonstrated.
There are no open issues or pull requests and no recent issue or pull-request activity. With only one release, the absence of discussion provides little evidence of an active user or maintainer community.
The repository has no stars, forks, or watchers. This is weak supporting evidence for maturity, but popularity is not required for a small package to be healthy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/queue Version ^10.0|^11.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
illuminate/database Version ^10.0|^11.0 | — | — |
illuminate/contracts Version ^10.0|^11.0 | — | — |
illuminate/notifications Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.