MIT licensing, a focused dependency set, and release notes make the package easier to evaluate. Organization backing and a matching repository partly offset its limited public activity, but no security tooling is reported.
62%
Total Score
67
100
88
75
The package is young at 125 days, with three releases and a median interval of about 18 days. This shows initial activity but provides limited evidence of long-term maintenance.
One contributor holds all recorded commit activity, creating a thin operational base. Organization ownership provides some handoff capacity, so this is a caution rather than a severe abandonment signal.
Only one commit and one active maintainer were recorded in the last three months. That is limited observed maintenance for a package intended as a reusable framework dependency.
Composer build tooling is present, but no security-scanning tools are reported. The missing scanning is a modest supply-chain hygiene gap.
No repository security policy was found, reducing the project's stated process for receiving and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^13.9 | — | — |
illuminate/console Version ^13.9 | — | — |
illuminate/support Version ^13.9 | — | — |
illuminate/database Version ^13.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.