The package includes tests, a substantial README, and clear MIT licensing. Its single-person ownership and inactive repository leave limited evidence of ongoing support; pin this version if adopting.
62%
Total Score
50
90
50
The registry lists one maintainer. That is not inherently unhealthy, but combined with the lack of recent repository activity it indicates a thin support base.
Only two releases exist, both published within a short period, and there have been no releases in about 15 months. This leaves limited evidence of sustained maintenance.
The repository had no commits and no active maintainers in the last three months, consistent with the roughly 15-month gap since the last push and indicating weak current support.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package that manages lead data and webhooks.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/cache Version ^10.0|^11.0|^12.0 | — | — |
illuminate/queue Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.