Usable with caveats: the release is licensed, documented, tested in its repository, and not deprecated or archived. However, it is only 52 days old and shows no commits or contributor activity in the last three months, while repository security practices remain limited.
68%
Total Score
50
100
83
75
The registry namespace and repository owner match, but the owner is an individual rather than an organization; this provides direct ownership alignment without substantial institutional backing.
The package is young at 52 days and all four releases occurred within a very short interval, so long-term maintenance and release reliability are not yet demonstrated.
The repository has zero commits and zero active maintainers in the last three months. Because the package is only 52 days old, this may reflect a short observation window, but it leaves current maintenance capacity unproven.
There were no new or closed issues or pull requests in the last month, and no pull requests were merged. Combined with zero recent commits, this provides little evidence of an active maintenance process.
The repository has no stars, forks, or watchers. This is weak supporting evidence for maturity, but popularity alone is not decisive for a young, focused package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/view Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/routing Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/session Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.