Usable with caveats: it is a properly licensed, tested, clearly documented Laravel package backed by an organization, but it has had only one release and no recorded commits in the last three months. The missing security policy and unspecified workflow permissions add modest transparency concerns.
62%
Total Score
75
86
75
This is the sole release, published about 177 days ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers during the last three months; combined with only one release, this is a meaningful sign of limited ongoing activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.
No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.
The only workflow has no top-level token permissions declaration. No write permissions were detected, but explicit least-privilege settings would provide clearer CI safety.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
orchestra/testbench Version ^10.0 | — | — |
illuminate/validation Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.