Usable with caveats: it has a stable MIT release, tests, and an unarchived repository, but documentation and recent maintenance are thin. The lack of commits for about seven months and no security policy increase adoption risk for a small, single-maintainer package.
65%
Total Score
50
100
75
50
A post-autoload-dump install script is present. This is common for Composer packages, but it means installation performs package code execution and warrants normal dependency review.
Tests are present, which supports basic project maturity, but the package has no README. Documentation is particularly useful for a CLI package that developers must discover and integrate.
The package is backed by a matching personal GitHub account rather than an organization. This is coherent with the repository identity, but it provides less organizational continuity than a project with broader backing.
The package has existed for more than three years and received a release about seven months ago, but only one release was published in the last year, indicating a slow maintenance pace.
The repository recorded no commits and no active maintainers in the last three months, consistent with roughly seven months since the last push. That weakens confidence in prompt maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version * | — | — |
illuminate/support Version * | — | — |
illuminate/contracts Version * | — | — |
spatie/laravel-model-info Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.