The organization-owned repository includes tests, a release note for this version, and no install-time scripts. Its six runtime dependencies and absent security policy offer limited additional reassurance.
35%
Total Score
50
58
75
The package has had no release in more than eight years and no releases in the last 12 months, indicating prolonged abandonment risk despite 14 historical releases.
There were zero commits and zero active maintainers in the last three months, reinforcing the strong abandonment concern shown by the old release history.
No license is declared, and neither the package nor repository contains a license file, leaving usage rights unclear.
Composer is used for builds, but no security scanning tooling is present, leaving maintenance and vulnerability checks less transparent.
The repository is not marked archived, but its last push was in 2018, consistent with the separate evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
consigliere/signal Version 0.5.* | — | — |
illuminate/support Version 5.5.* | — | — |
consigliere/siegnor Version 0.4.* | — | — |
consigliere/passerby Version 0.2.* | — | — |
illuminate/contracts Version 5.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.