Its scope is narrow, and the stable v1.0.7 release includes clear installation and usage instructions. The project has had no release or commit activity for about four years, with no tests or security scanning to support ongoing maintenance.
40%
Total Score
0
100
69
75
The latest of eight releases was about four years ago, with no releases in the last 12 months. This long pause is strong evidence of abandonment risk despite the package's stable version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the unchanged release history. Nothing provided compensates for the lack of recent development activity.
The repository has zero stars and one fork, indicating very limited visible adoption. Popularity is only supporting evidence, but it provides no counterweight to the long inactivity.
Composer build tooling is present, but no security scanning tools are configured. This is a transparency and maintenance gap rather than a severe risk on its own.
The linked repository is not archived, although its last push was about four years ago. The active archive status is positive, but it does not offset the absence of recent commits.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^8.0|^9.0 | — | — |
illuminate/support Version ^8.0|^9.0 | — | — |
illuminate/database Version ^8.0|^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.