The package is documented and has a matching source repository, but its 13-file codebase has no tests or security policy. Its stable version and MIT license do not offset the lack of demonstrated maintenance.
34%
Total Score
0
75
50
The package has had only two releases, with the latest published in November 2015 and none in the last 12 months. This indicates roughly 10 years and 10 months without registry maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and a substantial abandonment risk.
The artifact and repository each contain only 13 files, forming a small and understandable implementation. The matching repository and package contents provide transparency, but the limited project footprint offers little evidence of ongoing development.
Composer build tooling is present, but no security scanning tools were detected. This weakens assurance somewhat, although the absence of scanning alone is not evidence of an unsafe release.
The repository is not archived, which preserves a basic path for maintenance, but its last push was in June 2016 and does not compensate for the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5.0 | — | — |
illuminate/database Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.