The package is clearly licensed, intentionally documented as a small metapackage, and backed by a matching organization repository. Its very limited release and activity history leaves maintenance capacity unproven; pin this version while the project matures.
68%
Total Score
75
100
88
83
The package was first released about 2 minutes before collection and has only 1 release, so there is no demonstrated release track record yet.
The repository shows 0 commits and 0 active maintainers in the past 3 months. Because the package is newly released, this is not evidence of abandonment, but it leaves ongoing maintenance unproven.
Composer is used as the build tool, fitting the package ecosystem, but no security-scanning tool was detected; for this very small metapackage that is a minor hygiene gap.
The repository has no security policy. This weakens disclosure transparency, although the package is a small type-definition metapackage with no reported security workflow.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/illuminate-notifications-impl Version ~13.32.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.