Its Apache-2.0 license, tests, and organization-owned repository provide useful transparency. The package is extremely new, so maintenance history is not yet established; pin this version and reassess after further releases.
62%
Total Score
75
100
79
88
The artifact includes tests and the repository confirms tests are present. The missing README and changelog reduce consumer documentation, but the tests provide some compensating project evidence.
The package was first released today and has only two releases, so there is no meaningful maintenance or stability history yet.
There were no commits or active maintainers in the last three months, but the repository was created and pushed today, making the empty historical window expected rather than evidence of abandonment.
Composer is used as a build tool, but no security scanning tools were detected; for a new package this is a modest transparency and hygiene gap.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/conditionable Version 13.33.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.