The package includes tests in its repository, a clear MIT license, and no install-time scripts. Its small, inactive repository and lack of security policy leave limited evidence of ongoing maintenance for a new dependency.
39%
Total Score
50
72
83
The package has made no releases in the last 12 months, and its latest release was about nine years ago despite a long history. This is strong evidence of abandonment risk.
There were no new issues, closed issues, pull requests, or merged pull requests in the last month, while the repository shows no recent activity. This reinforces the maintenance concern, though some issue counts are unknown.
The repository has only 1 star, 0 forks, and 1 watcher. Popularity is not decisive by itself, but this provides little supporting evidence of an active or widely maintained project.
The project uses Composer, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of a defective build.
The linked repository is not archived, which is a positive sign, although its last push was about nine years ago and therefore does not demonstrate active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ~5.4 | — | — |
guzzlehttp/guzzle Version ~6.0 | — | — |
illuminate/support Version ~5.4 | — | — |
illuminate/contracts Version ~5.4 | — | — |
league/oauth1-client Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.