The package has a clear MIT license, a matching repository, and no install-time scripts. Its small scope and organization backing help, but the old codebase lacks tests and security-policy coverage.
35%
Total Score
83
50
69
75
The package has only two releases, both from February 2016, with no releases in the last 12 months. The latest release is more than 10 years old, which is a strong abandonment concern.
The package declares five runtime dependencies, including several framework components and a Markdown engine. This is a meaningful integration surface for an old pre-1.0 wrapper, though not severe by itself.
There are no open issues or pull requests and no recent issue or pull-request activity. Combined with the old release history, this offers no evidence of ongoing maintenance.
The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a broad user or contributor base.
The repository uses Composer for builds, which is appropriate for a Packagist package, but it has no security-scanning tools. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/view Version 5.2.* | — | — |
league/commonmark Version ^0.12 | — | — |
illuminate/support Version 5.2.* | — | — |
illuminate/contracts Version 5.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.