The README, tests, and release notes make integration reasonably straightforward. The small project footprint and lack of security policy leave less evidence of ongoing support, so pinning this version is prudent.
60%
Total Score
50
100
81
83
The package is backed by a user-owned repository rather than an organization, so the single registry maintainer provides limited redundancy if the owner becomes unavailable.
The package has 23 releases since March 2017, but its latest release was in February 2023 and it had no releases in the last 12 months, indicating a long maintenance gap.
There were no commits and no active maintainers in the last 3 months, consistent with the package's extended release hiatus and raising abandonment risk.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.
The linked repository is not archived, but its recorded last push was in February 2023, so the non-archived status does not offset the broader maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^6.0|^7.0|^8.0 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
illuminate/database Version ^6.0|^7.30.4|^8.0 | — | — |
illuminate/filesystem Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.