The README, release notes, and small dependency set make the package straightforward to assess and integrate. Ongoing maintenance depends on one contributor, and the repository has no security policy or automated security scanning.
69%
Total Score
50
100
88
75
The source repository is owned by a user account, not an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.
The package has existed since August 2022 and released v1.0.4 in June 2026, but only five releases overall and one in the last 12 months indicate a modest maintenance cadence.
All recent commits came from one contributor, so maintenance continuity depends entirely on that person; the repository is user-owned rather than organization-backed.
There was one commit in the last three months from one active maintainer, showing recent activity but a very thin maintenance cadence.
Composer is used as the build tool, but no security scanning tools are present, leaving automated detection coverage limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.