The package has an MIT license, a substantial README, source tests, and release notes for this version. Its workflows are fully audited but use four unpinned actions, adding a smaller reproducibility concern.
15%
Total Score
50
100
50
100
Packagist marks the entire package as abandoned, with no replacement specified. Package-wide deprecation is a severe adoption risk rather than a release-specific warning.
The package has 22 releases but none in the last 12 months; its latest release was about 5 years and 5 months ago. The long period without releases is consistent with the archived project.
The repository recorded zero commits and zero active maintainers in the last 3 months. This provides direct evidence that ongoing maintenance capacity is absent.
The linked repository is archived and was last pushed about 3 years and 2 months ago, indicating the project is no longer maintained. This strongly increases abandonment risk.
All three workflows were analyzed without failed files or audit findings, and the pull_request_target workflow has no reported untrusted checkout or script-injection sink. However, all four action references are unpinned, which is a reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version ^8.0 | — | — |
illuminate/support Version ^8.0 | — | — |
illuminate/filesystem Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.