Usable with caveats: the package is licensed, stable, tested in its repository, and has a recent release history. However, no commits or active maintainers were recorded in the last three months, and the repository lacks a security policy while two workflows grant write access.
68%
Total Score
75
100
100
80
The repository recorded zero commits and zero active maintainers in the last three months. Although the package has recent releases and a recent push, the missing recent development activity raises maintenance risk.
There were no new issues or pull requests in the last month and one pull request remains open; this is limited evidence of current community activity but not a severe concern by itself.
The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.
Two workflows declare top-level write permissions and one workflow has no top-level permissions declaration, which is weaker than least-privilege workflow hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/notifications Version ^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.