The focused source tree, matching repository, and MIT license make the package straightforward to inspect and integrate. Maintenance has effectively stopped, and the project lacks security-reporting and scanning practices, so pinning this old release carries meaningful risk.
43%
Total Score
50
70
75
The latest release was published about 8 years ago, with no releases in the last 12 months. Although the package had 13 historical releases, this prolonged release gap is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the latest release being about 8 years old. The repository was pushed more recently, but that does not show current maintenance.
Composer build tooling is present, but no security-scanning tool was detected. The build setup is appropriate, while the missing scanning practice is a modest maintenance and transparency gap.
No security policy was found in the linked repository. For a dependency that integrates with application data models, this reduces transparency around vulnerability reporting.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/database Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.