The implementation is small and has limited evidence of long-term maturity. It has recent repository activity, a clear license, no install-time scripts, and automated security tooling, which partly offsets the narrow maintenance base.
62%
Total Score
63
100
89
75
The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.
The package has only one release, published 409 days ago, with no releases in the last 12 months. This is limited maturity evidence and raises maintenance uncertainty.
All recent repository commits come from one contributor. With user-owned project backing, this leaves maintenance dependent on a single person.
One commit from one active maintainer in the last three months shows some current maintenance, but the very low volume provides only modest confidence in sustained support.
The repository has one star and no forks or watchers. This is weak supporting evidence, though popularity alone is not required for a small stable package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.