The package has a clear license, README, and changelog, with a small dependency footprint. Its lack of tests and security policy leaves less evidence for ongoing maintenance quality.
44%
Total Score
0
100
75
75
The latest release was published nearly six years ago, with no releases in the last 12 months; this is strong evidence of abandonment risk despite the package having four historical releases.
The repository recorded no commits in the last three months and no active maintainers during that period; the last push was more than five years ago, reinforcing the maintenance concern.
The artifact includes a README and changelog, which helps consumers understand installation and history. No published tests is normal packaging practice, but the repository also reports no tests, reducing evidence of maintenance quality.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities; this is a maintenance and transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5|~6|~7|~8|~9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.