The stable release is licensed, documented, and has no install-time scripts. Its small single-maintainer project has limited recent activity, no security policy, and an unpinned workflow image.
58%
Total Score
50
100
81
67
The repository is owned by an individual rather than an organization, so the single registry maintainer does not have organizational backing shown by the provided evidence.
The package has 34 releases since 2017, but none in the last three years, indicating substantially slowed maintenance for a dependency that may need framework compatibility updates.
There is one open issue and one open pull request, but no new or closed issues or pull requests in the last month, offering little evidence of active maintenance.
Composer build tooling is present, but no security scanning tools are reported, leaving security checking less transparent.
The linked repository is not archived, although its last recorded push was in February 2024, so it remains available but does not offset the broader maintenance slowdown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0|~1.20 | — | — |
illuminate/http Version ^9.0|^8.0|^7.0|^6.0|5.*|^10.0 | — | — |
illuminate/cache Version ^9.0|^8.0|^7.0|^6.0|5.*|^10.0 | — | — |
illuminate/config Version ^9.0|^8.0|^7.0|^6.0|5.*|^10.0 | — | — |
illuminate/console Version ^9.0|^8.0|^7.0|^6.0|5.*|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.