The package has clear documentation, tests, a license, and a repository that matches its published name. Its single release, roughly three months without commits, one-person ownership, and fully unpinned workflow actions reduce confidence in continued maintenance.
62%
Total Score
50
70
50
One registry maintainer is a thin publishing base for a new package. The repository is user-owned rather than organization-backed, so there is no provided evidence of broader maintenance capacity.
This is a very new package with one release, published about three months ago, so there is not enough release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but there is no observed follow-up activity after the initial release.
The repository has 1 star, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these numbers provide little evidence of community review or adoption.
The repository has no security policy. This is a transparency and reporting gap, though it is less serious for a small, newly published package than evidence of unsafe workflow behavior would be.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.