Tests and a repository that matches the package provide some confidence. However, the six-character README, absent license, and no security policy make adoption poorly documented and harder to govern.
32%
Total Score
25
67
75
The package has had only two releases, with no releases in about 9 years and 11 months. This strongly indicates abandonment risk despite the package not being deprecated.
There were no commits and no active maintainers in the last three months, while the repository was last pushed in September 2016. This is strong evidence that maintenance has stopped.
No license is declared and no license file was detected in the package or repository. This creates a material adoption and legal-transparency concern.
The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This gives some ownership consistency without showing broader project backing.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ~5.2 | — | — |
chimerarocks/user Version ^0.1.0 | — | — |
illuminate/support Version ~5.2 | — | — |
illuminate/database Version ~5.2 | — | — |
illuminate/contracts Version ~5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.