Clear documentation, tests, and a balanced two-person contributor base add confidence. The main weakness is that all five workflow actions are unpinned, reducing build reproducibility; the package is also still on a pre-1.0 version.
82%
Total Score
100
92
100
v0.5.0 is not a stable major release, so the public API may still change, but it is not marked as a prerelease and recent releases have been consistent.
All three workflows were analyzed successfully, use read-only permissions, and have no reported audit findings. However, all five referenced actions are unpinned, leaving workflow dependencies less reproducible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^13.0 | — | — |
illuminate/view Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.