Usable with caveats: the package is small, clearly documented, licensed, and not deprecated, but maintenance is sparse with only one release in the last year and no commits in the past three months. Its single-maintainer project also lacks tests and security scanning, so prefer it only if the limited scope fits your needs.
62%
Total Score
67
100
78
90
Only one registry publishing maintainer is listed, leaving limited observable publishing redundancy; the repository is user-owned rather than organization-backed, so this is a genuine continuity concern.
The package has only three releases across about 23 months, with one release in the last 12 months and a median interval of about 248 days; this indicates slow maintenance for a dependency.
There were zero commits and zero active maintainers in the past three months, which is a meaningful maintenance concern, though the package's narrow scope and February push provide some compensating evidence.
The repository has zero stars and forks and one watcher, offering little community evidence or backup around maintenance. Popularity is only supporting evidence, so this lowers confidence in project maturity rather than making the package unfit.
Composer is used for the build, but no security scanning tools are configured; for a small package this is a hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/cache Version ^10 || ^11 || ^12 | — | — |
illuminate/console Version ^10 || ^11 || ^12 | — | — |
illuminate/support Version ^10 || ^11 || ^12 | — | — |
illuminate/database Version ^10 || ^11 || ^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.