The MIT license, focused dependency set, and repository tests make the package straightforward to inspect. Its workflow leaves actions unpinned and no security policy is present.
44%
Total Score
38
100
75
75
The package has 15 releases but no release in more than five years, which is a substantial maintenance concern for a framework integration.
The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the long-term maintenance concern.
One registry publisher account is listed. This is limited redundancy, but the repository is owned by the same individual account, so it is not evidence of a broader organization-backed team.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, offering limited visible project backing.
There were no new issues, closed issues, or pull requests in the last month, and no open pull requests; this is consistent with an inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/database Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.