The package has a substantial README, tests, a matching repository, and a declared MIT license. Its single-maintainer, zero-activity project and absent security tooling leave maintenance capacity uncertain.
61%
Total Score
50
100
78
88
Only one registry account has publish access. That is a limited publishing base for a user-owned project and increases reliance on one person, though registry access alone does not measure actual development activity.
The repository is owned by an individual rather than an organization, so the single maintainer is not offset by visible organizational backing.
All eight releases were published within one day, and there have been no later releases during the package's 145-day lifetime. This suggests an early burst rather than an established release cadence.
The repository recorded zero commits and zero active maintainers over the last three months. For a package only 145 days old, that still leaves maintenance continuity unproven.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a small project but provides little evidence of ongoing community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.