A README, tests, MIT declaration, and matching organization repository provide useful transparency. The tiny codebase and minimal community activity offer little evidence of ongoing support.
38%
Total Score
75
69
50
The latest release was published nearly 11 years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
There has been no new or closed issue or pull request activity in the last month, and one issue remains open. This is consistent with an inactive project, though the small project size limits how much activity would be expected.
The repository has only 3 stars and no forks, providing little supporting evidence of broad review or community adoption. Popularity is not decisive, but it reinforces the maintenance concern.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present. Given the repository's age, this is a secondary transparency gap rather than the main risk.
The repository is not archived, which avoids an explicit abandonment signal, but its last push was nearly 10 years ago and does not offset the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version 5.1.* | — | — |
illuminate/routing Version 5.1.* | — | — |
illuminate/support Version 5.1.* | — | — |
illuminate/database Version 5.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.