Clear documentation, repository tests, and a matching source project make the package straightforward to understand and integrate. Its small user base, single registry maintainer, and unpinned workflow actions reduce assurance. Pin this version and plan for an alternative if maintenance does not resume.
58%
Total Score
67
100
78
75
The source repository is owned by an individual account rather than an organization, so the single registry maintainer is consistent with limited project backing and offers little redundancy.
The latest release was on May 20, 2025, with no releases in the last 12 months. Four releases over roughly two years show a real release history, but the current gap raises maintenance risk.
There were zero commits and zero active maintainers in the last three months. Combined with the older last push, this indicates a currently inactive project.
The repository has one star, zero forks, and one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little independent evidence of review or adoption.
The repository uses Composer, but no security scanning tools were detected. The build setup is present, while the missing scanning is a modest transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~10.0 || ~11.0 || ~12.0 | — | — |
illuminate/notifications Version ~10.0 || ~11.0 || ~12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.