A single maintainer and no security policy or scanning leave little visible support for a cryptography package. The clear README, tests, license, and release notes help, but not enough to offset its age.
38%
Total Score
38
100
78
83
The package has had no release in the last 12 months, and its latest release was in May 2014. This is strong evidence of abandonment for a security-sensitive library.
There were no commits and no active maintainers in the last three months, consistent with repository work having stopped many years ago.
The registry lists one maintainer. A single maintainer is a limited support base, and the repository is user-owned rather than organization-backed, increasing continuity risk.
The registry namespace and repository owner align, but the owner is an individual account rather than an organization, providing no additional organizational backing.
There were no new issues, pull requests, or merges in the last month. With no recent commits or releases, this supports an inactive-project assessment rather than demonstrating stability.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 4.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.