It has a clear GPL-3.0 license, no install-time scripts, and a repository README. The project is small and lightly supported, so future fixes and independent review may be limited.
58%
Total Score
50
78
75
The package has had no registry release in over seven years, with zero releases in the last 12 months. This is a substantial maintenance concern, although the repository is not archived.
Only one registry maintainer is listed, and the project is user-owned rather than organization-backed. This leaves limited visible publishing redundancy.
There were no commits and no active maintainers in the last three months. The recent repository push partly offsets this, but current development activity is still not demonstrated by the collected commit window.
The repository has only 3 stars and 3 forks, indicating limited adoption and a small external review base. Low popularity alone is not decisive, but it provides little supporting maturity evidence.
Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/events Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.* | — | — |
illuminate/session Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.* | — | — |
illuminate/support Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.* | — | — |
intervention/image Version dev-master|~2,>=2.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.