Its README and small dependency surface make the code straightforward to evaluate. The project is not archived or deprecated, but the release has not been updated since 2015, so pinning it carries substantial compatibility and abandonment risk.
38%
Total Score
0
100
71
75
This is the package's only release, published about 11 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the absence of an explicit deprecation.
The repository recorded no commits and no active maintainers in the last 3 months, and its last push was in March 2016. This confirms that maintenance has effectively stopped.
Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap, though it is less important than the prolonged inactivity.
The repository has no security policy. For an inactive package this leaves vulnerability-reporting expectations unclear, adding a small transparency concern.
Version 0.0.1 is not a stable major release, which increases compatibility risk for consumers. The lack of any later release makes this more significant.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.