The package includes a clear README, matching MIT licensing, tests in the repository, and release notes for this version. Its single release maintainer, absent recent activity, and unfinished alpha status leave little evidence of ongoing support.
18%
Total Score
25
58
83
The package is explicitly abandoned on Packagist and names nuwave/lighthouse as its replacement; package-level deprecation is a severe adoption risk.
The last release was about eight years ago, with no releases in the past year. This strongly indicates the package is no longer maintained.
The repository recorded no commits and no active maintainers in the past three months, consistent with the long release gap and abandoned package status.
The repository is owned by an organization matching the registry namespace, which provides some ownership context, but it does not offset the observed lack of maintenance.
The repository has no security policy. This is a transparency gap, though it is secondary to the package's explicit abandonment and stale activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version ^5.4 | — | — |
nuwave/lighthouse Version ^2.2 | — | — |
illuminate/support Version ^5.4 | — | — |
illuminate/database Version ^5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.