Usable with caveats: it is licensed, documented, stable, and backed by a matching repository with tests and a security policy. However, all five releases came within about one week and there has been no commit activity for roughly nine months, leaving maintenance continuity uncertain.
68%
Total Score
50
100
78
100
There were no commits and no active maintainers in the last three months, following the last push about nine months ago; this is the main concern for ongoing fixes and compatibility.
Only one registry account has publish access, limiting publishing redundancy; the matching user-owned repository provides some direct ownership context but does not remove the single-maintainer continuity risk.
The registry namespace and repository owner match, and the repository is user-owned rather than organization-backed. That supports authenticity of the linkage but offers limited maintainer redundancy.
The package has five releases, but they were concentrated within about one week and no later releases are shown, so the longer-term maintenance record is limited.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not make a small package unhealthy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.