This is a young, pre-1.0 package with only 3 releases over 48 days, so its API and maintenance practices have limited maturity evidence. However, the release is not deprecated, the repository is active and unarchived, recent commits involve two contributors, the repository contains tests and substantial CI/build scaffolding, the package is clearly represented by its linked repository, and workflow permissions are read-only with no detected dangerous patterns. The main concerns are the small release history, concentration of 77% of recent commits in one contributor, zero observable popularity or issue activity, and the absence of repository security-scanning tools; overall, it appears reasonable to evaluate as a dependency but warrants normal caution around pre-1.0 changes and maintainer continuity.
80%
Total Score
80
100
78
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0|^13.0 | — | — |
open-telemetry/api Version ^1.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
open-telemetry/context Version ^1.0 | — | — |
particle-academy/prism Version >=0.116 <1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.