The release is licensed, documented, tested in its repository, and has a stable version with release notes. Adopt laragear/turnstile instead, because this package is explicitly no longer maintained.
8%
Total Score
0
58
50
Packagist marks the entire package as abandoned and names laragear/turnstile as the replacement. This is a direct indication that new projects should not depend on it.
The repository had zero commits and zero active maintainers during the last three months. The archived state explains this and leaves no current maintenance capacity.
The linked repository is archived, confirming that active maintenance has ended even though it was pushed about 13 months ago.
The package has eight releases over about four and a half years, but there have been no releases in the last 12 months. That cadence is consistent with the package's stated abandonment.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, which is a supply-chain hygiene weakness rather than the main adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version 10.*|11.* | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/events Version 10.*|11.* | — | — |
illuminate/routing Version 10.*|11.* | — | — |
illuminate/support Version 10.*|11.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.