Documentation, licensing, and repository tooling give consumers a solid starting point. The project is very new and all recent commits come from one contributor, so its long-term maintenance capacity is not yet proven.
67%
Total Score
88
100
88
88
This is the package's first release, published 0 days ago, so there is no release track record or evidence of sustained adoption yet.
One contributor made 100% of the 42 recent commits. The organization backing reduces the risk somewhat, but there is still no demonstrated contributor redundancy.
The repository has no stars or forks and one watcher. For a package released 0 days ago, this is mainly a lack of track record rather than evidence of abandonment.
All three workflows were analyzed with no untrusted checkouts, script injection, or audit findings, and none use broad top-level write permissions. However, all 11 analyzed action references are unpinned, leaving avoidable build reproducibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/database Version ^12.0|^13.0 | — | — |
symfony/http-kernel Version ^7.2|^8.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.