62%
Total Score
caution
Usable with caveats: no releases or commits since April 2023.
Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, this indicates limited publishing redundancy, though it is not itself evidence of poor maintenance.
The package has five releases since April 2020, but its latest release was in April 2023 and there were no releases in the following three years and five months. This materially raises abandonment risk.
The repository had zero commits and zero active maintainers in the last three months, consistent with inactivity since April 2023. This is the strongest maintenance concern for a dependency.
There are two open issues and no issues or pull requests were opened or closed in the last month. This is consistent with the broader lack of recent activity but is not severe on its own.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, partly outweighed by the small, simple package structure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/session Version ^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.