It includes a license, tests, a substantial README, and a repository that clearly matches the package. The single maintainer and lack of a security policy leave limited evidence of long-term maintenance and security practices.
68%
Total Score
50
100
86
75
Only one registry publishing maintainer is listed. For this individually owned project, that indicates a narrow publishing base, though it does not by itself show abandonment.
The repository is owned by an individual account rather than an organization, so there is no organizational backing shown to compensate for the thin maintenance history.
The package is 0 days old with only 1 release, so there is no demonstrated release cadence or track record yet.
There were 0 commits and 0 active maintainers in the last 3 months, but the repository and package were created at the time of this assessment, so this mainly means maintenance history is unproven.
Composer build tooling is present, but no security-scanning tooling was detected, leaving security automation unsubstantiated.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.