Usable with caveats: this is a young pre-1.0 SDK with strong documentation, tests, release notes, and frequent releases, but recent repository activity has stopped and the project has only one maintainer. Its very small user base and limited security hygiene make ongoing support less certain.
68%
Total Score
38
100
80
75
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful warning about current maintenance despite the recent release history.
Only one registry account has publishing access. The linked repository is owned by the same individual, so this is not an unexplained registry mismatch, but it leaves limited visible publishing redundancy.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is no organizational backing to offset the single-maintainer risk.
The package is young at about 321 days old but has 22 releases in the last year, indicating active delivery; the median interval of about 15 hours is unusually fast and may increase compatibility risk.
There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral without evidence of unresolved problems, though it offers little evidence of an engaged contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0 || ^13.0 | — | — |
illuminate/config Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/container Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.