The package includes a license, usage documentation, tests, and no install-time scripts. Its repository has had no push since July 2020, and the registry marks the package abandoned; workflow references are also unpinned.
20%
Total Score
42
75
Packagist marks the entire package as abandoned, with no replacement named. Package-level abandonment is a severe dependency-health concern.
This is the only release, published about 6 years ago, with no releases in the last 12 months. That strongly indicates the package is not actively maintained.
The repository is not archived, but its last push was about 6 years ago, so the non-archived status does not compensate for the prolonged inactivity.
Composer build tooling is present, but no security scanning tools were found. This is a minor transparency and maintenance gap, secondary to the abandonment evidence.
The workflow audit completed cleanly with no untrusted checkout, injection, or high-confidence security findings. However, all 5 action references are unpinned, leaving avoidable build-reproducibility risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/cache Version ^7.21 | — | — |
illuminate/database Version ^7.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.