The package has a clear MIT license, readable documentation, repository tests, and no install-time scripts. Unpinned workflow images and no security policy add build and maintenance concerns.
39%
Total Score
33
78
75
This is the package's only release, published in June 2022, with no releases in the following four years. That strongly suggests abandonment for a framework integration package.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in June 2022. This is a substantial abandonment risk.
The repository is owned by an individual user rather than an organization, so the single-release and inactive-maintenance pattern is not offset by visible organizational backing.
There were no new or merged pull requests and no issue activity in the last month. The zero open pull requests provide no evidence of active maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external indication of adoption or maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^6.0 || ^7.0 || ^8.0 | — | — |
illuminate/support Version ^6.0 || ^7.0 || ^8.0 | — | — |
jenssegers/mongodb Version ^3.6 | — | — |
illuminate/database Version ^6.0 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.