It is documented, tested, licensed, and has a small dependency set. The lack of activity since June 2025, single maintainer, and unpinned workflow actions increase maintenance and update risk.
62%
Total Score
67
100
88
67
Only one registry maintainer is listed, leaving limited visible publishing capacity and increasing continuity risk for a package with no recent releases.
The package has had no release in about 15 months, despite five releases during its first several weeks. That suggests maintenance has slowed substantially.
There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release and indicating stalled maintenance.
Composer build tooling is present, but no security-scanning tooling is configured. This is a modest transparency and maintenance gap rather than evidence of a defect.
The repository has no security policy, leaving vulnerability reporting and response expectations unspecified.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/notifications Version ^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.