Repository tests, release notes, and a matching source tree improve confidence. The small dependency surface and security policy are helpful, while the project remains too new for long-term maintenance patterns to be established.
68%
Total Score
50
100
94
100
The package is 0 days old with three releases published within roughly 11 hours, so there is not yet enough history to demonstrate durable maintenance.
One contributor made all two recent commits, leaving maintenance dependent on a single person despite the repository being correctly linked to the package.
There were two commits in the last three months, but that activity comes from only one active maintainer; the short observation window also limits the maintenance evidence.
Both workflows were fully audited with no findings, all five action references are pinned, and one workflow uses top-level write permissions; that broader token scope is a mild hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/database Version ^12.52.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.