Clear documentation, repository tests, and an MIT license make integration easier. The project is too new to show a maintenance track record, and its workflow references are not pinned.
67%
Total Score
50
92
50
The package is only about 27 minutes old and has just two releases, issued about 23 minutes apart. This is insufficient evidence of sustained maintenance, though the rapid initial release activity is a small positive.
The repository records no commits or active maintainers in the past three months, but the project was created only shortly before this assessment. The lack of history still leaves maintenance capacity unproven rather than showing established abandonment.
Both analyzed action references are unpinned, which weakens workflow supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or other severity-rated findings, so this remains a caution rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.