The repository has tests, release notes, a security policy, and 61 commits in the last three months. All seven workflow actions are unpinned, and one contributor made every recent commit. Pin a later release after this new project builds more history.
68%
Total Score
83
94
83
This is the package's first release, published less than a day ago, so there is no track record for maintenance or release stability yet.
All 61 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some capacity to hand off maintenance but does not demonstrate a second active contributor.
The audit analyzed all three workflows with no triggers, untrusted checkouts, script injection, or audit findings, but all seven action references are unpinned, leaving avoidable update and supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version ^12.0|^13.0 | — | — |
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/console Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.