The package is clearly documented and published from a traceable project with a straightforward dependency footprint. However, the repository shows no commits or issue progress in the last three months, so maintenance may have stalled.
60%
Total Score
50
90
50
The package has 18 releases over more than eight years, but none in the last 12 months; its latest release was on February 26, 2025. This suggests maintenance has slowed substantially.
The repository recorded 0 commits and 0 active maintainers in the last three months. That is a meaningful maintenance concern, although the project is not marked archived and the assessed release is stable.
There were no new or closed issues and no merged pull requests in the last three months, leaving little evidence of ongoing support activity. The small number of open items limits how strongly this alone indicates abandonment.
The repository has no published security policy. This weakens vulnerability-reporting transparency, but the README provides a direct security contact, which partly compensates for the missing policy file.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version 5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/console Version 5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version 5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
symfony/var-dumper Version ^5.0|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.