Package Health

yii2tech/illuminate

The project has a clear license, tests in its repository, and an organization-backed source tree. Release activity is sparse, recent commit activity is absent, and the workflow uses two unpinned actions.

Latest 1.3.3PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has existed for about 7 years with 10 releases, but only one release in the last 12 months and a median interval of about 353 days indicate slow maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented reporting path or security-maintenance expectations.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-confidence findings and no untrusted triggers or sinks. However, both action references are unpinned, which leaves the build exposed to changing action revisions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Paul Klimov

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ~2.0.14
—
—
illuminate/http
Version ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0
—
—
illuminate/console
Version ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0
—
—
illuminatech/array-factory
Version ^1.2.7
—
—

Weekly Downloads

Info

Last Published
6 months ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform