A complete README, tests, and a small dependency set make the package straightforward to evaluate and integrate. It is still a very young project with only one release and no commits in the past three months, so long-term maintenance is unproven.
62%
Total Score
50
100
86
75
One registry publisher is a limited publishing base, but the organization-backed repository makes a short registry maintainer list less concerning.
The package is 219 days old but has only one release, so there is little evidence of sustained release maintenance.
There were zero commits and zero active maintainers in the past three months, leaving maintenance continuity unproven for a package this new.
The repository uses Composer, but it reports no security-scanning tooling; this is a modest transparency and hygiene gap rather than a severe risk.
No repository security policy was found, reducing disclosure transparency, though this alone does not indicate that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.0|^11.0|^12.0 | — | — |
illuminate/queue Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.