The repository is actively developed and includes tests, release notes, a license, and a security policy. Organization backing helps offset the concentrated maintainer base, but production adoption has little history.
68%
Total Score
50
88
75
This is the package's first release, published today, with no release history or established cadence to demonstrate long-term maintenance.
All 26 commits in the past three months came from one contributor, creating a concentrated maintenance risk; organization ownership provides some ability to hand work off.
All eight analyzed action references are unpinned, so workflow dependencies can change without a commit to this repository. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^12.0|^13.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/queue Version ^12.0|^13.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.