The package has a clear MIT license, a matching repository, and no install-time scripts. Its lack of commits since September 2023, no tests, and minimal repository adoption increase the risk of relying on it as framework dependencies evolve.
58%
Total Score
75
100
75
75
The package includes a README and has a GitHub release for this version. Tests and a changelog are absent, but their absence from a published artifact is normal; the missing repository tests still leave verification weaker.
The package has 16 releases, but none in the last 12 months; the latest release was published on September 3, 2023. This indicates a sustained maintenance gap for a library intended to integrate with evolving frameworks.
There were zero commits and zero active maintainers in the last three months, consistent with the package's long release pause and raising abandonment risk.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community support.
Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a modest transparency gap rather than a severe concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0|^9.0|^10.0 | — | — |
illuminate/database Version ^8.0|^9.0|^10.0 | — | — |
joonlabs/php-graphql Version ^v2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.