The repository has had no commits or releases for over a year, and all 12 workflow actions are unpinned. It remains clearly packaged, tested, licensed, and not deprecated.
65%
Total Score
67
100
83
83
The package has four releases, but none in the last 12 months; the latest release was over a year ago. This indicates a meaningful maintenance slowdown for a package developers may depend on.
There were no commits and no active maintainers in the last three months, consistent with the lack of releases for over a year. This is a concrete maintenance concern.
There are no open issues or pull requests and no recent activity. This is not inherently negative for a small stable package, but it provides little evidence of active community maintenance.
The repository has three stars, zero forks, and one watcher. Low popularity is only supporting evidence, but it suggests limited external adoption and review capacity.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10|^11|^12 | — | — |
illuminate/contracts Version ^10|^11|^12 | — | — |
leuverink/asset-injector Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.