The release is clearly licensed and includes a substantial README and source tree. A single registry maintainer, no security policy, and no recent project activity leave limited evidence of ongoing support.
38%
Total Score
25
63
50
The package has 84 releases but none in the last six years; its latest registry release was published on August 21, 2020. This strongly indicates abandonment despite its substantial historical release count.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since August 2020. The lack of recent maintenance is a significant adoption risk.
Only one account has registry publish access. No organization backing is shown, so this leaves a thin publishing base, though access records alone do not establish who actively maintains the code.
The linked repository name does not match the package name, and the README mention could not be confirmed. This creates uncertainty about whether the repository is the package's actual maintained source.
The repository has no security policy and no security-scanning tools. That weakens vulnerability-reporting and maintenance transparency, although it is less significant than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ~5.0|~6.0|~7.0 | — | — |
illuminate/config Version ~5.0|~6.0|~7.0 | — | — |
illuminate/console Version ~5.0|~6.0|~7.0 | — | — |
illuminate/support Version ~5.0|~6.0|~7.0 | — | — |
illuminate/database Version ~5.0|~6.0|~7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.