The repository includes tests, a changelog, a clear license, and no install-time scripts. However, there has been no commit activity since the initial release about 10 months ago, and the project has no security policy or adoption signals; pin this version and reassess before upgrading.
62%
Total Score
50
100
83
83
The repository had zero commits and zero active maintainers in the past three months, despite being about 10 months old. This is the strongest maintenance concern and raises abandonment risk.
This is the package's only release, published about 10 months ago. A single release provides limited evidence of sustained maintenance and maturity.
There are no open issues or pull requests and no recent issue or pull-request activity. While this may reflect a small, quiet project, it provides no evidence of an active feedback and maintenance loop.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any adoption signal reinforces the limited maturity evidence.
Composer is used as the build tool, but no security scanning tools are reported. The missing scanning is a hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.