This is a usable, clearly licensed and non-deprecated package with a matching source repository, repository tests, a stable 2.0.0 release, and no install-time lifecycle scripts. However, maintenance evidence is mixed: it has only six releases over roughly three years, one release in the last 12 months, and no commits or active maintainers in the last three months. The repository has no security policy or security-scanning tooling, and its workflow does not declare top-level token permissions. The package is therefore a reasonable dependency for a Laravel project, but its small user and maintainer footprint and limited recent development warrant monitoring and a fallback plan.
68%
Total Score
63
100
83
80
A single registry maintainer creates a limited publishing bus factor, although the matching user-owned repository provides direct project ownership context.
The repository is owned by an individual user rather than an organization, so the one-person ownership context does not provide organizational redundancy.
Six releases over about 3 years, with one release in the last 12 months and a median interval of about 197 days, indicate a relatively sparse maintenance cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently weak maintenance activity despite the recent push and release.
The repository has zero stars and forks and one watcher, indicating very limited visible adoption; popularity is supporting evidence rather than a standalone health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.