The package is small and lacks a README, tests, and a security policy. Its MIT declaration, stable release, and absence of install scripts reduce operational concerns.
55%
Total Score
50
78
67
One individual has registry publish access, giving the project a thin maintainer base. The repository is also user-owned, so there is no organization backing shown to offset that risk.
The repository contains only 11 files, primarily source, configuration, and IDE metadata, with no apparent documentation or test structure; this supports the maturity concern but is partly consistent with a narrowly scoped package.
The published artifact has no README, tests, changelog, or release notes; missing tests and changelog are normal for a small published artifact, but the missing README makes integration less transparent for this library.
The project is owned by an individual account rather than an organization, so the single-maintainer concern is not compensated by visible organizational backing.
Only two releases exist across roughly 109 days, with both published within minutes of each other; this provides little evidence of an established maintenance cadence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/notifications Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.