The package is licensed, documented, and easy to inspect, with no install-time scripts or registry deprecation. Its small project has shown no commit activity for nearly 10 years, leaving compatibility and abandonment concerns.
42%
Total Score
50
50
71
83
The latest release was in September 2015, nearly 11 years ago, with no releases in the past 12 months. This is strong evidence of abandonment for a Laravel integration package.
The repository recorded zero commits and zero active maintainers in the past three months, and its last push was in December 2016. That long inactivity materially raises maintenance and compatibility risk.
The package has six runtime dependencies centered on Laravel components and one development dependency. The profile is understandable, though the old release age leaves current compatibility unverified.
Composer is used as the build tool, but no security scanning tooling was detected. The missing scanner is a hygiene gap rather than a standalone dependency blocker.
The linked repository is not archived, which is a modest compensating signal, but its last push was nearly 10 years ago and does not offset the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version 5.x | — | — |
illuminate/console Version 5.x | — | — |
illuminate/support Version 5.x | — | — |
illuminate/database Version 5.x | — | — |
illuminate/filesystem Version 5.x | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.