This release appears suitable to depend on, with strong repository and package hygiene for a young project. It is a stable major release, has recent and frequent releases, active commit and pull-request activity, repository tests, a changelog, security policy, Dependabot, and restrictive workflow permissions. The main concern is concentration: all 20 commits in the last 3 months came from one contributor and the registry has one maintainer, although organization ownership provides some backing. The repository has no current popularity signal, but that is weak supporting evidence and does not outweigh the observed maintenance and transparency.
82%
Total Score
80
100
89
100
Only one account has registry publish access, which creates publishing continuity risk. The repository's organization ownership and active commit history provide some compensating project backing, but do not remove the single-publisher concentration.
The package is young at 70 days, but it has four releases in that period with a median interval of about 3 days, indicating active early development rather than abandonment. Its short history still limits evidence of long-term stability.
One contributor made all 20 commits in the last 3 months, creating a low bus factor and a meaningful continuity concern. Organization ownership provides some ability to hand maintenance off, but no second active contributor is observed.
The repository has zero stars, forks, and watchers. This provides little external adoption evidence, but popularity is supporting evidence only and the package's observed maintenance signals are stronger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.72 || ^3.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/database Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.