Usable with caveats: the package is active, tested, documented, licensed, and not deprecated or archived. Maintenance is concentrated in one contributor, and the repository has no security policy or automated security scanning.
72%
Total Score
70
100
86
88
Two registry maintainer entries are present, although they appear to represent the same person, so registry publishing capacity is limited.
The project has existed for over seven years with 18 releases and a release in the last year, but only one release in the last 12 months indicates a slower cadence.
One contributor made all four recent commits, creating a significant single-person continuity risk; the organization-owned repository offers some backing but does not remove the concentration.
Four commits were made in the last three months, showing current maintenance, but all activity came from one active maintainer.
Composer build tooling is present, but no security scanning tools were detected, leaving security-quality automation unverified.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/notifications Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.