The package has a clear GPL license, a small dependency set, and organization backing. Its empty README and absent security policy reduce transparency, while its stable version and non-archived repository offer some reassurance.
52%
Total Score
75
100
67
50
The artifact includes a README file, but it contains no readable content; tests and a changelog are absent, which is normal for published package artifacts. The empty README is a minor consumer-transparency gap.
The package has 14 releases since March 2019, but none in the last 12 months and its latest release was about three years ago. This materially raises abandonment risk despite its earlier regular cadence.
The repository recorded no commits and had no active maintainers in the last three months, consistent with the package's roughly three-year release gap. The repository is not archived, but current maintenance is not evident.
The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency and maintenance gap, though it is not evidence of maliciousness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
illuminate/database Version ^5.8|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.