Package Description
55%
Total Score
caution
Usable with caveats: it has only one release and no recent repository activity.
The package runs a post-autoload-dump install-time script. Lifecycle execution adds review and installation risk, although this signal does not show that the script is harmful.
This is the package's only release, published about 2 years and 6 months ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain.
The repository has recorded no commits and no active maintainers in the last 3 months, while its last push coincided with the initial release about 2 years and 6 months ago. The included tests provide some baseline structure but do not offset the lack of ongoing activity.
The repository has no security policy. This is a transparency and reporting gap, though the package is not archived or deprecated.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^10.0|^11.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
illuminate/contracts Version ^10.0|^11.0 | — | — |
symfony/expression-language Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.