The package is documented, licensed, actively released, and backed by a matching repository with tests and a security policy. Maintenance depends entirely on one contributor, and all four workflow actions are unpinned.
72%
Total Score
63
100
89
100
The registry namespace and repository are owned by the same individual account, confirming consistent ownership but not providing organizational backup.
One contributor made all 12 commits in the last three months, leaving no demonstrated backup for maintenance if that contributor becomes unavailable.
The repository recorded 12 commits in the last three months, showing active work, but all activity comes from one active maintainer.
The repository has no stars, forks, or watchers. This is limited supporting evidence, but popularity alone does not outweigh its recent release and commit activity.
The project uses Composer and Make, but no security-scanning tools were detected, leaving security-quality checks less visible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0 || ^13.0 | — | — |
illuminate/routing Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/contracts Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.