The declared dependency set is relatively broad for a bridge package, with test tools listed among runtime dependencies. The stable version format does not offset the lack of current maintenance evidence.
12%
Total Score
50
33
The registry marks the entire package as abandoned and names arrilot/data-anonymization as its replacement. This is a severe adoption risk because the assessed package is no longer the intended maintained package.
The latest release was published over six years ago, with no releases in the last 12 months. That strongly indicates abandonment and leaves compatibility and maintenance concerns unresolved.
The package declares seven runtime dependencies, including phpunit/phpunit and mockery/mockery, which appear intended for testing rather than runtime use. This adds packaging and dependency-management risk, though it is secondary to the abandonment evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mockery/mockery Version ^1.3 | — | — |
phpunit/phpunit Version ^9.0 | — | — |
illuminate/console Version 5.*|6.*|7.* | — | — |
illuminate/support Version 5.*|6.*|7.* | — | — |
illuminate/contracts Version 5.*|6.*|7.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.