The package has a usable README, tests, a declared MIT license, and a stable release. Its single-user ownership and lack of security tooling reduce confidence for a long-lived dependency.
57%
Total Score
50
81
75
Only one registry maintainer is listed. That is a limited publishing base for continuity, though the linked repository belongs to the same account.
The package has had no releases in the last 12 months, and its latest release was published in September 2023. The seven-release history shows an initially active project but not current maintenance.
There were no commits or active maintainers in the last three months, consistent with the last push being in September 2023. This is a meaningful abandonment concern.
The repository has zero stars and forks and only one watcher. Popularity is not required for a small package, but these counters provide little supporting evidence of active community use.
Composer is used for builds, but no security-scanning tooling is present. The missing scanner is a modest transparency and maintenance gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ~5|^6|^7|^8|^9 | — | — |
illuminate/hashing Version ~5|^6|^7|^8|^9 | — | — |
illuminate/session Version ~5|^6|^7|^8|^9 | — | — |
illuminate/support Version ~5|^6|^7|^8|^9 | — | — |
illuminate/filesystem Version ~5|^6|^7|^8|^9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.