Its beta status and one-person publishing base leave limited evidence of maturity. The package is otherwise transparent, tested, licensed, and free of install-time scripts, but no commits in three months weakens confidence in ongoing maintenance.
60%
Total Score
25
78
83
There were no commits and no active maintainers in the last three months. For a beta package, that is meaningful evidence that maintenance may have stalled.
One registry publishing account is listed. The repository owner is an individual rather than an organization, so there is no provided backing signal to compensate for the thin maintainer base.
This is a young package, about 163 days old, with only one release. That limited history provides little evidence of sustained maintenance, but does not by itself indicate abandonment.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal to offset the limited release and maintenance history.
Composer is used as the build tool, but no security scanning tools are detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^12.0 | — | — |
illuminate/http Version ^12.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
illuminate/cache Version ^12.0 | — | — |
illuminate/queue Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.