illuminate/config

Usable with caveats: this is a mature, licensed package from an organization-backed project with a long release history, but it has had no commits or active maintainers in the last three months. The repository also lacks security scanning and contains a pull-request-target workflow without explicit token permissions.

Latest v13.32.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One workflow uses pull_request_target, which can require careful handling of untrusted pull requests; no untrusted checkout or script injection was detected, so this is a contained workflow risk rather than a severe finding.

Package scaffolding

The published artifact has no README, tests, or changelog, but the package is a small component and published packages commonly omit source tests and changelogs; the missing README is still a minor consumer-documentation gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance concern that is partly offset by the recent release history and organization backing.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a repository hygiene and review gap.

Security policy

The repository has no published security policy, reducing transparency about vulnerability reporting and response practices.