Clear documentation, tests, and a matching source repository make integration easier. The project is only 38 days old, has two commits in the last three months from one contributor, and its workflow uses two unpinned actions.
68%
Total Score
63
100
83
83
The package and repository are owned by the same individual account, so the project has clear ownership but no organization-level backing or demonstrated handoff capacity.
The package is only 38 days old with three releases, so it has limited evidence of long-term maintenance despite recent publishing activity.
One contributor made all two commits in the last three months, leaving no demonstrated contributor redundancy for ongoing maintenance.
Only two commits were made in the last three months, all by one active maintainer. The recent activity is not collapsed, but the small volume gives limited evidence of sustained maintenance.
The repository has no stars, forks, or watchers, providing no supporting adoption evidence; this is only a minor concern for a package this new.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/notifications Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.