The project is young, with four releases over 12 days, and its four GitHub Actions references are all unpinned. Clear documentation, tests in the repository, an MIT license, and a security policy improve transparency.
68%
Total Score
50
100
83
100
The package and repository are owned by the same individual account, so there is no organization backing to offset the concentrated maintainer base.
The package is only 103 days old and has four releases, all concentrated in its first 12 days; this provides limited evidence of sustained maintenance, despite recent repository activity.
All three recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.
Three commits were recorded in the last three months, with one active maintainer; this shows some recent work but not a strong maintenance cadence.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but popularity alone does not determine the health of a small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.