12%
Total Score
critical
The package is deprecated, archived, and has had no releases or commits for nearly two years.
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk even though the deprecation does not target only this release.
The package has 16 releases but none in the last 12 months, and its release activity stopped around the same time as repository activity. The early burst of releases does not compensate for the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the archived state, this indicates a high abandonment risk.
The linked repository is archived, and its last push was nearly two years ago. This strongly indicates the project is no longer maintained.
The repository has one star and no forks, providing little supporting evidence of community adoption or external maintenance. Low popularity alone is not decisive, but it reinforces the other concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0 | — | — |
illuminate/contracts Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.