The package is clearly licensed and documented, and its repository remains unarchived. Its tiny adoption footprint, absent security policy, and fully unpinned workflow references add maintenance and build-integrity concerns.
42%
Total Score
0
75
75
The package has had no releases in nearly six years; its four releases all occurred early in its history, indicating a substantial maintenance gap.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing support.
The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than decisive, but this provides little evidence of a broad user or contributor base.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package with no recent maintenance activity.
The workflow audit completed cleanly with no dangerous triggers or findings, but all 3 action references are unpinned. That leaves build inputs less reproducible and increases supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nextgen-tech/ewus Version ^1.1 | — | — |
illuminate/console Version ^6.0|^7.0|^8.0 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
illuminate/contracts Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.