The source includes tests, a changelog, release notes, and a matching repository, while installation scripts are absent. Pin workflow actions before relying on automated builds, and expect limited evidence about long-term maintenance.
68%
Total Score
75
92
75
The package is 0 days old with only 2 releases, so there is not yet enough release history to demonstrate sustained maintenance. Its two releases in the last 12 months show active initial publication but do not offset the very limited track record.
The repository has 0 commits and 0 active maintainers in the last 3 months. Because the repository was created very recently, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity unestablished.
All 3 analyzed action references are unpinned, which weakens build reproducibility. The audit analyzed the only workflow completely, found no untrusted checkout or script injection, and reported no high- or medium-severity findings, limiting the concern to workflow hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.