It includes a substantial README, tests, and an MIT declaration. The repository is not archived and the package has no install-time scripts, but its single-maintainer profile and limited security hygiene increase long-term upkeep risk.
62%
Total Score
50
83
75
Only one registry publishing account is listed, which leaves little visible publishing redundancy. The repository is user-owned rather than organization-backed, so this is a modest bus-factor concern.
The latest release was on July 4, 2024, with no releases in the last 12 months. That is a meaningful maintenance concern for a framework integration package, despite 15 releases overall.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap and indicating currently stalled development.
Composer build tooling is present, but no security-scanning tools were detected. The missing automated security coverage adds a small transparency and maintenance concern.
No security policy was found in the repository. This weakens vulnerability-reporting transparency, although it is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version >8.0 | — | — |
illuminate/support Version >8.0 | — | — |
illuminate/database Version >8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.