It has clear documentation, tests, a changelog, MIT licensing, and no install-time scripts. Its small ecosystem footprint and missing security policy leave less independent evidence for long-term support.
72%
Total Score
67
100
83
75
The repository is owned by an individual user rather than an organization, so the concentrated maintainer activity is not offset by visible organizational backing.
The package is only 72 days old with four releases and a median interval of about 7 days. This shows active early development but provides limited long-term maintenance history.
One contributor made all 21 recent commits, leaving the project exposed to a single-person maintenance failure.
The repository has 1 star, 0 forks, and 0 watchers. Given the package's short history, this is limited supporting evidence of adoption and maturity.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.