The package is clearly documented and has a matching source repository, license, and release notes. Its maintenance record is still thin, with only one release and no commits in the last three months, so future support is uncertain.
62%
Total Score
75
100
83
83
The registry lists one publishing maintainer. The repository is user-owned rather than organization-backed, so there is no provided evidence of a broader publishing base, though registry access alone does not establish maintenance capacity.
This package has only one release, published 261 days ago, so there is little release history from which to judge sustained maintenance.
There were no commits and no active maintainers in the last three months. For a package only 261 days old with one release, this is a meaningful sign that maintenance may have stopped.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, so this provides little external validation but does not independently make the package unsafe to depend on.
Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.