It includes repository tests, release notes, and a clear MIT license. Its only release is about five months old, with no commits in the last three months; workflows also leave all six actions unpinned.
58%
Total Score
50
75
This is the package's only release, published about five months ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded no commits and no active maintainers in the last three months, leaving recent maintenance capacity unproven for a package still at its first release.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
Version 0.1.0 is not a stable major release, which indicates an early-stage API and greater compatibility uncertainty for adopters.
Both workflows were fully analyzed with no dangerous findings, but all six referenced actions are unpinned, so future builds depend on moving action references.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/queue Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/database Version ^11.0 || ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.