The repository provides tests, clear documentation, release notes, and a security policy. Its small dependency surface, MIT license, and stable release format also support adoption.
66%
Total Score
75
100
94
100
The package has had no registry releases in the last 12 months, and its latest release was about 18 months ago; the seven-release history and earlier 18-day median interval provide some maturity but do not offset the current pause.
There were no commits and no active maintainers in the last three months, a meaningful sign of currently low development activity; the recent repository push provides only limited compensation.
All 13 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene and process risk rather than a severe standalone health failure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.