The repository includes tests, a README, and seven recent commits, while the package is licensed and not deprecated. Its one-release history, single-contributor activity, absent security scanning, and unpinned workflow actions leave meaningful maturity and maintenance risk.
62%
Total Score
63
100
83
75
Only one registry maintainer is listed. The matching user-owned repository confirms direct ownership but does not provide a second publishing or maintenance path.
The package and repository are owned by the same individual user rather than an organization, so there is no organizational backing to offset the concentrated maintainer base.
This is a young package with one release in its first 44 days and no established release cadence, so long-term maintenance maturity is not yet demonstrated.
All seven recent commits came from one contributor, creating a concentrated maintenance risk with no demonstrated contributor redundancy.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal for a package that is still very new.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^11.0|^12.0|^13.0 | — | — |
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/notifications Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.