Usable with caveats: it has a clear MIT license, documentation, tests, matching organization-backed repository, and no deprecation or install scripts. However, the release is about 17 months old and the repository has had no commits in the last 3 months, with little adoption and no security policy or scanning.
62%
Total Score
67
100
83
88
The package has a long release history with 17 releases, but there have been no releases in about 17 months, which raises maintenance and compatibility concerns.
There were no commits and no active maintainers in the last 3 months, indicating a currently inactive maintenance cadence. The recent repository push provides some compensation but does not show ongoing development.
There are three open pull requests but no new or merged pull requests in the last month, suggesting unresolved maintenance work and limited recent collaboration.
The repository has only 2 stars, 2 forks, and no watchers, so community validation and the likelihood of outside maintenance appear limited.
Composer build tooling is present, but no security scanning tools are configured, leaving a transparency and maintenance-control gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^5.0|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^5.0|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.