The repository includes tests, a changelog, and a security policy. Releases are stable and workflows are audited, though the project is still young and maintenance is concentrated.
68%
Total Score
50
93
75
The package is only 57 days old, with all five releases clustered on its first day and a median interval of about 10 minutes; this shows activity but little long-term cadence.
One contributor owns all recent commits, with a 100% share, and the project is user-owned rather than organization-backed; this creates a meaningful handoff risk.
Nine commits in the last three months show recent development, but all activity comes from one active maintainer, limiting evidence of sustained maintenance capacity.
Both workflows were analyzed successfully, all five action references are pinned, and no audit findings or untrusted checkout or script-injection paths were found. One workflow grants top-level write access, which is a mild hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0||^13.0 | — | — |
illuminate/cache Version ^12.0||^13.0 | — | — |
illuminate/console Version ^12.0||^13.0 | — | — |
illuminate/support Version ^12.0||^13.0 | — | — |
illuminate/contracts Version ^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.