The package includes a substantial README, repository tests, a changelog, and a matching source repository. Its only notable weakness is that it is brand new, with no established release or commit history yet, and its four workflow actions are unpinned.
82%
Total Score
50
100
79
67
The package and repository are owned by the same individual account, so the ownership story is consistent. Individual ownership provides less maintainer redundancy than an organization-backed project.
This is the first release, published 0 days ago, so there is no historical cadence or track record to evaluate. That is an early-maturity limitation rather than evidence of abandonment.
There were 0 commits and 0 active maintainers in the last 3 months, but the package is 0 days old and the repository was pushed 0 days ago. The lack of history is therefore an unknown maturity signal, not a demonstrated collapse in maintenance.
The repository uses Composer build tooling, but no security scanning tools were detected. For a small new PHP package this is a modest transparency gap, not a severe dependency risk.
No security policy was found in the repository. This modestly limits disclosure transparency for future issues, though it does not indicate that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/cache Version ^11.24|^12.0|^13.0 | — | — |
illuminate/support Version ^11.24|^12.0|^13.0 | — | — |
illuminate/container Version ^11.24|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.