Its long history, recent release, tests, and security policy provide useful support. Maintenance has gone quiet for three months, and workflows use unpinned images and action references.
68%
Total Score
50
100
89
83
One registry maintainer is consistent with a small user-owned project, but it leaves a thin publishing base and is not offset by recent contributor activity.
The package has existed for about 12 years with 63 releases, but only one release in the last 12 months; the latest release is recent, so this is a mild maintenance concern rather than abandonment.
There were no commits and no active maintainers in the last three months, which is a meaningful sign of currently quiet maintenance despite the recent release.
Only two issues and one pull request are open, but there was no issue or pull-request activity in the last month; this supports the broader picture of limited current activity without proving abandonment.
The repository uses Composer, but no security scanning tool was detected; this is a modest transparency gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^5.5|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^5.5|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^5.5|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.