The package has only two releases over 106 days, so its long-term maintenance record is still short. Tests, a changelog, and two active contributors are reassuring, while unpinned workflow actions and no security policy leave modest process gaps.
68%
Total Score
83
100
75
50
One registry maintainer is a modest publishing bus factor, though repository activity shows two contributors recently sharing the work.
The package is 106 days old with only two releases, both within a short interval, so there is limited evidence of sustained maintenance.
The repository has zero stars, forks, and watchers; this does not prove poor quality, but it provides no community adoption evidence for this young package.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest verification gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/cache Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/console Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.