This release is usable but carries meaningful maintenance and transparency concerns. It has a recent release, an unarchived organization-backed repository, a focused dependency profile, tests in both the artifact and repository, and no install-time scripts or registry deprecation. However, it remains pre-1.0, has only six releases across roughly 889 days, shows no commits or active maintainers in the last three months, has no README or changelog, and lacks security-policy and workflow permission hardening. The organization backing and recent repository push provide some reassurance, but the low repository activity and limited documentation make this a moderate-risk dependency rather than a clearly healthy one.
62%
Total Score
63
100
78
80
Only one registry account has publish access, creating concentration risk. The repository is owned by an organization, which provides some backing but does not establish multiple active publishers.
The package has existed for about 889 days and has six releases, including two in the last 12 months; this shows some continuity, though the relatively small release count limits maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months, a significant abandonment concern. The recent push and release history provide some compensating evidence, but not enough to make the inactivity fully benign.
There were no new or closed issues or pull requests in the last month, and no pull requests were merged. This is limited evidence of external maintenance activity, although the open-issue count is unknown.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide little supporting evidence of community adoption or external review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.