Documentation and packaging are solid, with a long release history and a current stable release. Ongoing work is narrowly concentrated, and the project lacks a published security policy or security scanning.
70%
Total Score
50
100
94
83
The repository is owned by an individual user rather than an organization, so the concentrated recent contribution activity is not visibly backed by an organization that could readily transfer maintenance.
All commits in the past three months came from one contributor, giving the repository a concentrated current bus factor. The package's long release history partially offsets this, but no second active contributor is shown.
Only one commit was made in the past three months by one active maintainer. This is a meaningful sign of limited current maintenance capacity despite the recent release.
There are 133 open issues and no new issues or pull requests in the past month, with one pull request merged. The backlog is a mild maintenance concern, though it does not show complete abandonment.
Composer and Make are used for project tooling, but no security scanning tools are detected. The missing scanning is a transparency and hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ~5|^6|^7|^8|^9|^10|^11|^12|^13.0 | — | — |
illuminate/hashing Version ~5|^6|^7|^8|^9|^10|^11|^12|^13.0 | — | — |
illuminate/session Version ~5|^6|^7|^8|^9|^10|^11|^12|^13.0 | — | — |
illuminate/support Version ~5|^6|^7|^8|^9|^10|^11|^12|^13.0 | — | — |
intervention/image Version ^3.7|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.