This is a clearly scoped Composer metapackage with an Apache-2.0 license, matching repository, and organization backing. Pin this release while its maintenance record develops.
65%
Total Score
75
100
80
75
The package was first released less than one day ago and has only 2 releases, so there is not yet enough history to demonstrate sustained maintenance. Its rapid initial release sequence is consistent with a newly published generated package, which limits but does not remove the uncertainty.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the repository itself was created less than one day ago, this indicates limited evidence rather than established abandonment, but it still lowers confidence in ongoing maintenance.
The repository uses Composer, appropriate for this package, but no security-scanning tool was detected. For a three-file metapackage this is a modest hygiene gap rather than a severe supply-chain concern.
No security policy was found in the repository. This is a transparency gap, although the package is a small metapackage with no install-time lifecycle scripts and a minimal dependency profile.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/illuminate-support-impl Version ~13.33.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.