The package has a clear README, a small dependency set, and no install-time scripts. Its source is compact and matches the package, but ongoing maintenance depends on one contributor and recent activity is sparse.
64%
Total Score
50
100
88
75
Only one registry account has publish access. That is a meaningful publishing continuity concern for a user-owned project, though the repository confirms the same person owns and maintains it.
The repository is owned by an individual rather than an organization, so the single-maintainer and single-contributor findings are not offset by visible organizational backing.
The package is about 253 days old with 10 releases, all published within one day, so it shows initial activity but not a sustained release pattern.
All recent commits come from one contributor, leaving no demonstrated secondary maintainer to provide continuity if the primary maintainer becomes unavailable.
Only one commit was recorded in the last three months from one active maintainer. This indicates sparse recent maintenance and raises the risk that issues or compatibility updates may be delayed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0 | — | — |
illuminate/cache Version ^10.0|^11.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.