A clear README, tests, matching license, and no install-time scripts make the package straightforward to evaluate and adopt. Its very young history leaves little evidence about long-term maintenance, and security documentation is absent.
68%
Total Score
50
100
88
88
One registry maintainer is consistent with the matching user-owned repository, but it leaves the project dependent on a single publisher.
The registry namespace and repository are owned by the same individual account, so there is no organizational backing to offset the single-maintainer risk.
The package is 54 days old with only one release, so there is limited evidence of release reliability or sustained maintenance.
One contributor holds 100% of the recent commit share, creating a concrete single-person continuity risk for this user-owned project.
Only two commits were recorded in the last three months, all from one active maintainer; this is some recent activity but limited evidence of sustained development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.