The package is well documented, tested, and licensed, with a security policy and no install scripts. Its very short history and absent recorded commit activity leave maintenance capacity unproven; pin this version only if early-stage adoption is acceptable.
60%
Total Score
50
75
100
The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the package's small and unproven maintenance base.
The package is only 5 days old and has just 2 releases, so its maintenance record and production maturity are not yet established.
The repository records 0 commits and 0 active maintainers over the last 3 months. Its recent push and the package's 5-day age partly explain this, but sustained maintenance capacity remains unproven.
There has been no issue or pull-request activity in the last month. For a package only 5 days old this is inconclusive, but it provides no evidence of an established support community.
The repository has 0 stars, forks, and watchers. This is weak supporting evidence, but the package is too new for the absence of popularity to carry major weight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^13.0 | — | — |
illuminate/view Version ^13.0 | — | — |
illuminate/cache Version ^13.0 | — | — |
illuminate/console Version ^13.0 | — | — |
illuminate/routing Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.