The small codebase includes a README, tests, and only two runtime dependencies, keeping integration straightforward. Organization ownership and the absence of install scripts help, but they do not offset the long maintenance gap and limited project safeguards.
39%
Total Score
63
100
69
88
The latest release was published about 8 years ago, and there have been no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
There were no commits and no active maintainers during the last 3 months, consistent with the last repository push being about 8 years ago. This materially increases abandonment risk.
There is one open issue and no issue or pull-request activity in the last month. This offers little evidence of an active support process.
The repository has 3 stars and no forks or watchers. Low popularity is supporting evidence of limited adoption, but it is not decisive for a small package.
Composer build tooling is present, but no security-scanning tooling was detected. For a package that writes application configuration, the missing scanning is a modest transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version 5.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.