Clear documentation, tests, changelog, and an MIT license make adoption straightforward. The small two-person project and unpinned workflow actions merit periodic review as it matures.
82%
Total Score
100
81
100
The package is young at 49 days old with only two releases, but releases arrived about 6 days apart, showing initial publishing activity rather than abandonment.
Composer build tooling is present, but no security-scanning tool was detected; the absence is a modest process gap rather than evidence of abandonment.
Version v0.2.0 is not a stable major release, so its API and behavior may still change even though it is not marked as a prerelease.
Both workflows use read-only permissions and the audit completed cleanly with no injection or high-severity findings. All four action references are unpinned, leaving avoidable dependency-integrity risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
illuminate/contracts Version ^13.0 | — | — |
illuminate/validation Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.