Clear documentation, tests, release notes, licensing, and a security policy support adoption. The project is still young, and all recent commits come from one contributor; workflow permissions and inherited secrets also deserve review.
68%
Total Score
67
88
83
The package is only 94 days old with two releases, so its maintenance record is still limited. The 34-day median release interval provides some evidence of continued delivery.
One contributor made 100% of the nine recent commits. Organizational backing may allow handoff, but no second active contributor is shown to demonstrate that capacity.
The repository recorded nine commits in the last three months, showing recent activity, but all were made by one active maintainer.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
All three workflows were analyzed with no untrusted checkouts or script injection, but all 13 action references are unpinned, two workflows grant top-level write permissions, and a high-confidence medium-severity secrets-inherit finding affects the release workflow.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/redis Version ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.