This is a mature, stable package with a long release history, an MIT license, a complete small source tree, tests, no install-time lifecycle scripts, and a current non-archived repository. The main concerns are the absence of repository commit activity and security tooling, zero recorded popularity and recent issue/PR activity, and reliance on a single registry maintainer. The recent release and explicit README package reference provide some evidence of ongoing stewardship, but maintenance depth and independent project activity remain limited, so adoption is reasonable with normal dependency review rather than a high-confidence choice for critical infrastructure.
68%
Total Score
50
100
89
90
Only one account has registry publish access. This is a genuine continuity and bus-factor concern for a user-owned project, although registry access alone does not establish who actively maintains it.
The repository is owned by a user account rather than an organization, so there is no organizational backing to offset the single-maintainer concern.
The repository recorded zero commits and zero active maintainers over the last three months. Although the latest package and repository push are current, the lack of sustained commit activity raises a meaningful maintenance-continuity concern.
There were no new issues or pull requests in the last month and no merged pull requests; this may reflect a quiet small library, but it provides little evidence of active community maintenance.
The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible community footprint weakens confidence in external validation and support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/events Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6|^7|^8|^9|^10|^11|^12|^13 | — | — |
illuminate/session Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6|^7|^8|^9|^10|^11|^12|^13 | — | — |
illuminate/support Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6|^7|^8|^9|^10|^11|^12|^13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.