Usable with caveats: it is a clearly licensed, tested package with a clean initial release, but it is very new and maintained by a single contributor with little activity or adoption evidence. Depend on it only if you can accept the risk of limited maintenance history.
62%
Total Score
50
83
80
The repository is owned by an individual user rather than an organization, so the project does not show organizational handoff capacity. This reinforces the single-maintainer concern.
This is the first and only release, published 44 days ago. That is not evidence of abandonment yet, but it leaves no track record for judging sustained maintenance or release reliability.
All recent commits came from one contributor, creating a high single-person dependency for fixes and releases. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset that concentration.
Only one commit was recorded in the last three months, all from one active maintainer. For a package only 44 days old this is consistent with an initial release, but it provides weak evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption or review signal for this new package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/console Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.