illuminate/testing

Usable with caveats: this is a mature, actively released package from an organization-backed project, but the linked repository shows no commits or active maintainers in the last three months. The repository also lacks a security policy and uses a pull-request workflow without explicit token permissions.

Latest v13.32.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One workflow uses pull_request_target, which can require careful handling of untrusted pull requests. No untrusted checkout or script injection was detected, limiting the concern to workflow design risk.

Package scaffolding

The published artifact has no README, tests, or changelog, but tests and changelogs are not expected in many compiled or distribution-focused package artifacts. The missing README is a minor consumer-documentation gap for a testing library.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months. Recent releases and a push 11 days ago partly offset this, but the observed short-term activity still raises maintenance-continuity concerns.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling was detected. The missing scanner is a modest transparency and supply-chain hygiene gap, not proof of unsafe code.

Security policy

No security policy was found in the repository. That makes vulnerability reporting and coordinated response less transparent, though the organization backing and established release history provide some compensation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Taylor Otwell

Direct Dependencies

Dependency	Last Release	Score
illuminate/support Version ^13.0	—	—
illuminate/contracts Version ^13.0	—	—
illuminate/macroable Version ^13.0	—	—
illuminate/collections Version ^13.0	—	—
illuminate/conditionable Version ^13.0	—	—