Tests and licensing make the package easier to adopt, while single-person ownership and the missing security policy leave limited evidence of long-term support.
62%
Total Score
50
83
75
A post-autoload-dump install script adds execution during installation, creating a modest supply-chain and reproducibility concern even though no harmful behavior is shown here.
Only one registry maintainer is listed, leaving limited publishing redundancy and increasing dependence on a single person.
The registry namespace and repository are owned by the same individual account, which supports clear ownership but provides no organization-level backing.
The package is only 48 days old, and all 8 releases occurred on the same day, so there is little evidence of sustained maintenance or a settled release cadence.
The repository has 0 stars, forks, and watchers. This is weak supporting evidence for maturity, but it is not by itself a health failure for a young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.