The package has had no new release or repository activity since September 2022, and it has only one release from a single maintainer. Its MIT license, focused seven-file tree, and substantial README provide useful transparency, but no tests or security scanning reduce confidence in future changes.
42%
Total Score
33
100
63
88
There has been only one release, on September 8, 2022, with no releases in the last 12 months. This is strong evidence of a stale package, although the small scope may reduce the need for frequent releases.
There were zero commits and zero active maintainers in the last three months. Combined with the last push being in 2022, this indicates a serious abandonment risk.
Only one registry account has publish access, limiting release continuity if that maintainer stops supporting the package. The repository is also owned by the same individual, so there is no organization backing shown to compensate for the thin base.
The repository and registry namespace are owned by the same individual account, with no organization backing shown. That aligns with the single-maintainer continuity concern.
The repository has one star, zero forks, and two watchers. Low popularity is only supporting evidence, but it provides little community signal to offset the lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^9.0 | — | — |
illuminate/support Version ^9.0 | — | — |
illuminate/database Version ^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.