It includes a license, release notes, repository tests, a security policy, and a clean workflow audit. The small dependency set and clear package structure are encouraging, but there is little history to establish long-term support.
72%
Total Score
50
100
93
100
Only one registry maintainer account is listed, which limits publishing redundancy; the linked repository provides some compensating project continuity but not a broader publishing base.
The repository is owned by a user account rather than an organization, so there is no demonstrated organizational handoff capacity to offset the concentrated contributor base.
The package is 0 days old with three releases all published on the same day, so long-term maintenance and release discipline are not yet demonstrated.
One contributor made all three recent commits, leaving maintenance dependent on a single active person and increasing continuity risk.
The repository has three commits in the last three months, showing recent activity, but this is a small record for a package expected to support ongoing framework releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 || ^5.7 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.