The source project remains active enough to provide a recent release, release notes, tests, and a security policy. The registry marks this package as abandoned in favor of the linked Tighten package, so pinning the replacement is safer.
58%
Total Score
75
81
100
Packagist marks the entire package as abandoned and points to tightenco/parental as the replacement. This is a meaningful adoption and continuity concern, although the linked replacement project is active and matches the package.
The repository had zero commits and zero active maintainers in the last three months. The recent release and recent push provide some compensation, but this still suggests limited current development activity.
The project uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance-hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/events Version ^10.0||^11.0||^12.0||^13.0 | — | — |
illuminate/database Version ^10.0||^11.0||^12.0||^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.