The package has a clear README, matching source tree, and a small dependency surface. Its stable version and lack of deprecation do not offset the uncertainty around future maintenance.
46%
Total Score
25
81
50
Only three releases exist, with none in about five years; the last release was published on April 21, 2021. This is strong evidence of abandonment risk despite a previously regular release interval.
The repository recorded no commits and no active maintainers during the last three months, consistent with the package's long release hiatus. The repository is not archived, but current maintenance capacity is not demonstrated.
There were no new or closed issues or pull requests in the last month. With no recent commits, this provides no evidence of ongoing support.
Composer build tooling is present, but no security scanning tools were detected. This weakens maintenance hygiene, though it is secondary to the lack of recent development.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a package used in application responses.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.5.*|5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0 | — | — |
illuminate/contracts Version 5.5.*|5.6.*|5.7.*|5.8.*|^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.