The organization-backed source and MIT declaration provide useful ownership and licensing context. However, this release has no demonstrated follow-up activity after its only release about six months ago, with no tests, README, or security policy visible.
58%
Total Score
75
81
50
The artifact and repository contain no README or tests, and the repository has no changelog. Missing tests and documentation reduce transparency for a payment integration, although the release does have GitHub release tracking.
This is the package's only release, published about six months ago, so there is little release history to demonstrate sustained maintenance.
The repository has recorded zero commits and zero active maintainers in the last three months, following the sole release about six months ago; this is weak evidence of current maintenance.
Composer is used for builds, but no security scanning tools are configured, leaving a modest repository hygiene gap.
The repository has no security policy, which is a transparency gap for a package handling payment-related operations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/routing Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.