There is no published security policy, while the small repository offers little process evidence beyond its license and release notes. The matching, unarchived repository is active enough to reduce abandonment concerns.
68%
Total Score
50
100
92
75
The package has 14 releases over about four years, but only one release in the last 12 months. The latest release is recent, which partly offsets the slower current cadence.
All recent commits come from one contributor, so maintenance depends entirely on a single person. No organization backing or second active contributor is provided to compensate.
Only one commit from one active maintainer was recorded in the last three months. That shows some maintenance, but the volume is sparse.
The linked repository has no security policy. This is a process and transparency gap, though the package's small scope and limited dependency surface reduce its practical weight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.