The package includes a README, tests, and no install-time scripts. Its manifest declares a license and the release is stable, but the project provides no security policy or scanning tooling.
35%
Total Score
25
69
75
The latest release was in September 2016, with no releases in the last 12 months despite the package being over 10 years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months; combined with the old last push, there is no observed recent maintenance.
Only one registry account can publish the package. That is a limited publishing base, and the available project ownership context does not show organizational backing to compensate for it.
The repository name does not match the package name and its README does not mention the package, so the source association is uncertain and reduces transparency.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful community-maintenance signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^5.2 | — | — |
illuminate/log Version ^5.2 | — | — |
illuminate/queue Version ^5.2 | — | — |
illuminate/redis Version ^5.1 | — | — |
illuminate/config Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.