The package has a clear README, repository tests, a license, and no install-time scripts. Read-only workflow permissions and a matching repository help, while the absent security policy leaves less operational transparency.
63%
Total Score
50
80
67
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no visible organizational handoff capacity.
The package is 44 days old with only one release, so there is little evidence yet of sustained maintenance or release reliability.
All recent repository commits came from one contributor, leaving maintenance dependent on a single person.
One commit from one active maintainer in the last three months shows recent activity, but the short history provides limited evidence of an established maintenance cadence.
The linked repository has no security policy, which reduces transparency about how vulnerabilities are reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
illuminate/validation Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.