This release appears suitable to depend on, with strong current maintenance and package hygiene: it is not deprecated or archived, has 16 releases over 174 days including 15 in the last 12 months, includes a README, changelog, tests, and a license, and the linked repository matches the package. The main risks are its young, pre-1.0 maturity, single-maintainer and single-contributor concentration, limited adoption evidence, and absence of a security policy or security scanning. These warrant monitoring and contingency planning, but the recent release and commit activity substantially reduce abandonment concerns.
78%
Total Score
70
100
83
90
Only one registry account has publish access. This is a meaningful operational concentration risk for a user-owned project, although recent repository activity shows that the maintainer is currently active.
The repository is owned by an individual user rather than an organization, so there is no organizational maintenance-resourcing signal to offset the concentrated maintainer and contributor base.
All 9 commits in the last three months came from one contributor, leaving a low bus factor and making continuity dependent on that individual.
The repository has 1 star, 0 forks, and 0 watchers. This is limited supporting evidence of adoption, but popularity alone does not establish poor health for a specialized package.
Composer build tooling is present, but no security scanning tools are configured. Build reproducibility is supported while automated security coverage is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^13.0 | — | — |
illuminate/database Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.