Clear licensing, focused dependencies, tests in the repository, and release notes make integration straightforward. No releases have appeared since December 2023, and recent commit activity is absent, so maintenance risk remains significant.
64%
Total Score
50
100
89
88
The registry namespace and repository are owned by the same individual, so ownership is consistent. The individual rather than an organization provides a relatively narrow backing base.
The package has 15 releases since January 2020, but none in the last 12 months and the latest was in December 2023. This is a meaningful maintenance concern despite its earlier regular cadence.
There were zero commits and zero active maintainers during the last three months. Although the repository was pushed in July 2024, the current inactivity weakens confidence in ongoing maintenance.
There are no new issues or merged pull requests in the last month, with one pull request still open. This is consistent with a quiet project and adds modest maintenance concern alongside the absent commits.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0 | — | — |
illuminate/contracts Version ^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.