The package has a usable README, a focused three-dependency footprint, and organization backing. The missing tests and security scanning reduce assurance for a validation library.
60%
Total Score
75
100
83
83
The package has four releases, all within the observed period, but the latest release was on January 21, 2026, about eight months before collection; the very short median interval suggests an initial burst rather than sustained cadence.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the January 21 last push, this indicates roughly eight months without observed source activity and raises abandonment concern.
The repository has zero stars, forks, and watchers. This provides no supporting adoption evidence, though popularity is only secondary evidence and does not independently determine package health.
Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest repository hygiene gap rather than evidence of unsafe code.
The repository has no security policy. That weakens vulnerability-reporting transparency, although it is less significant than the observed maintenance slowdown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/validation Version ^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.