The package includes tests, a clear README, an MIT license, Dependabot, and a security policy. Its two-release history and reported lack of commits or active maintainers over three months leave maintenance capacity uncertain.
68%
Total Score
50
100
88
100
The package and repository are owned by the same individual account, so the source match is clear, but there is no organization backing shown to broaden maintenance capacity.
The package is young at 124 days with only two releases, so its maintenance record is still limited, although releases were initially only about 3 days apart.
The repository reports zero commits and zero active maintainers in the last three months, a meaningful maintenance concern, although the separate repository signal records a push on September 23.
The repository has no stars, forks, or watchers. For a package only 124 days old this is weak supporting evidence rather than a standalone health failure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/cache Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/console Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.