The package is clearly identified, MIT-licensed, documented, and has no install-time scripts. Its single maintainer, absent tests, and missing security policy leave limited evidence for ongoing support.
57%
Total Score
50
78
75
There were zero commits and zero active maintainers in the last three months. Combined with the last push being over three years ago, this is strong evidence of inactive maintenance.
The package has six releases since November 2020, but none in the last 12 months; its latest release was over three years ago. This materially raises maintenance and abandonment concerns.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these counts provide little supporting evidence of community review or adoption.
The repository uses Composer as its build tool, but it has no security scanning tools. The missing scanning is a modest transparency gap for a dependency project.
The linked repository is not archived, so the project remains technically open for maintenance. However, its last push was over three years ago, consistent with the maintenance concern from release and commit history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
illuminate/database Version 5.8.*|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.