Usable with caveats: it is licensed, well documented, tested, and the repository is active and safely configured. However, this is a young v0.x package with only two releases, no commits in the last three months, and a single registry maintainer, so long-term maintenance is not yet established.
72%
Total Score
50
78
83
One account has registry publish access. This is a thin publishing base for a user-owned project and increases continuity risk, although it does not by itself indicate that the code is unhealthy.
The repository owner is a user account rather than an organization, so the single-maintainer and limited-backing concerns are not offset by organizational ownership.
The package is only 224 days old and has two releases, with releases separated by about 224 days. That limited history provides little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was recently pushed and had one merged pull request in the last month, the absence of recent commit activity is a meaningful maintenance concern.
The repository has 3 stars, 0 forks, and 0 watchers. Low adoption is only supporting evidence, but it means there is little visible community validation or backup.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/cache Version ^12.0|^13.0 | — | — |
illuminate/redis Version ^12.0|^13.0 | — | — |
illuminate/routing Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.