The package is clearly licensed and has no install-time scripts. Its repository is not archived, but the project shows little evidence of ongoing development and lacks tests, documentation, and security-policy coverage.
55%
Total Score
72
67
This is the only release, published 821 days ago, with no releases in the last 12 months. That is meaningful abandonment risk for a library, with no newer release evidence to compensate.
The package and repository each contain only 14 files, consisting mainly of source code and framework integration files. The small tree is not inherently unsafe, but it provides little visible project structure or supporting documentation.
The published artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. Missing tests and release documentation weaken maturity evidence, while the missing package README also hurts consumer guidance for this library.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide no community or adoption signal to offset the sparse maintenance record.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are reported. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.12 | — | — |
illuminate/support Version ^11.0 | — | — |
illuminate/database Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.