Documentation, tests, and an organization-backed repository improve confidence. The tiny audience and absent security policy leave less evidence for long-term support.
62%
Total Score
100
81
75
The package has had no release in more than four years, despite 13 releases since 2019. This is the clearest sign of weak ongoing maintenance, although the stable 4.0.0 release remains available.
The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a broad user or contributor base.
The repository is not archived, which avoids a severe abandonment signal, but it was last pushed in June 2022 and provides no evidence of recent maintenance.
The repository has no security policy. That is a transparency and maintenance gap for a package handling external API credentials, with no provided compensating security tooling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/config Version ~5.5.0|~5.6.0|~5.7.0|^6.0|^7.0|^8.0|^9.0 | — | — |
illuminate/support Version ~5.5.0|~5.6.0|~5.7.0|^6.0|^7.0|^8.0|^9.0 | — | — |
illuminate/database Version ~5.5.0|~5.6.0|~5.7.0|^6.0|^7.0|^8.0|^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.