The package has clear documentation, tests, an MIT license, and organization backing. Its maintenance record is still short, with no commits in three months, while the workflow uses two unpinned actions and has no security policy.
62%
Total Score
75
100
83
67
This is a young package, 106 days old, with six releases concentrated over roughly two hours; that shows initial activity but does not yet demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Because the package is only 106 days old, this is a meaningful maintenance concern but not proof of abandonment.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible community signal lowers confidence for a new package.
Composer build tooling is present, but no security-scanning tool was detected. That weakens repository hygiene without showing a direct release risk.
The repository has no security policy. This makes vulnerability reporting less transparent, though it is not by itself evidence that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^8.83|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/mail Version ^8.83|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^8.83|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.