Usable with caveats: this is a newly published package with seven releases in less than an hour and no established maintenance history. It has a matching repository, clear licensing, a README, and no risky install scripts, but there is no testing or security-policy evidence yet.
58%
Total Score
50
100
78
88
The registry namespace and repository owner match, but the owner is an individual rather than an organization. This is consistent ownership, though it provides limited backing capacity.
All seven releases were published on the same day, with a median interval of about 6 minutes; this indicates a very new project rather than an established release record and leaves long-term maintenance unproven.
There were zero commits and zero active maintainers in the previous three months, but the repository was only recently created and pushed, so this is insufficient evidence of abandonment while still leaving no proven maintenance track record.
The repository has zero stars, forks, and watchers. For a package created the same day, this mainly reflects lack of adoption evidence rather than abandonment, but maturity remains unverified.
Composer is used as a build tool, but no security-scanning tools are configured. The missing scanning is a transparency gap for a package that handles external API integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/cache Version ^10.0|^11.0|^12.0 | — | — |
illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.