Usable with caveats: it has clear documentation, tests, an MIT declaration, and a matching source repository, but it is a small, recently published project with no commits in the last three months. Security-policy and workflow-permission gaps add maintenance and transparency concerns.
62%
Total Score
33
100
83
67
The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign of slowed maintenance for a package released only recently.
Registry publishing access is held by one user, so the project has a thin administrative maintainer base; the repository's actual activity is also limited, leaving little evidence of maintenance capacity.
The registry namespace and repository owner match, and the owner is identified as an individual user rather than an organization; this is consistent ownership but offers limited institutional backing.
Only two releases have been published, both within about an hour, so the project has limited demonstrated release history and maturity.
The repository has zero stars, forks, and watchers. This is supporting evidence of limited adoption, not a decisive problem by itself, but it provides little external validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
vntrungld/prometheus-exporter Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.