The package has a clear README, stable version, matching repository, and no install-time scripts. Its tiny one-person project has had no commits or releases for about 15 months, and the license declaration conflicts with the artifact’s GPL-3.0 license file.
52%
Total Score
50
50
78
88
The package has four runtime dependencies centered on PHP and Laravel components, with no development dependencies declared. The runtime set is coherent, though the lack of declared development dependencies gives little visibility into project validation.
The manifest declares MIT, but the artifact license file is detected as GPL-3.0; although a license file exists in both the package and repository, the mismatch creates a real adoption and compliance concern.
One registry account has publish access, while the repository is owned by an individual rather than an organization. That may be sufficient for a small package, but it leaves limited visible maintainer capacity.
The source repository is owned by an individual account, not an organization. That is consistent with a small personal package but provides no broader project backing to offset the inactive maintenance record.
Only two releases were published, both shortly after the first release, and there have been no releases in about 15 months. This provides little evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.