Recent releases and clear packaging provide useful evidence, while three months without commits and a single maintainer limit confidence in ongoing support. The missing security policy and scanning are smaller transparency gaps.
68%
Total Score
50
100
89
88
Only one registry publishing account is listed, leaving little visible publishing redundancy; the linked repository is also user-owned rather than organization-backed.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance after the recent release.
There are no issues or pull requests and no activity in the last month, so there is little evidence of community review or support activity.
The repository has zero stars, forks, and watchers, providing no community adoption or external maintenance signal; this is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/routing Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.