The package is explicitly beta and has only one registry maintainer. It includes tests, a matching repository, and an MIT license, but its old tooling and absent security policy provide little additional assurance.
34%
Total Score
33
100
63
75
The package has only three releases, all concentrated in 2016, with no releases in the last 12 months and the latest release over ten years ago. This is strong evidence of abandonment despite the package not being registry-deprecated.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no work for over ten years.
Only one registry maintainer is listed, leaving little visible publishing redundancy. The linked repository is also user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.
One issue remains open, while there have been no new or closed issues or pull requests recently. This suggests limited ongoing support, though the small project size makes the signal less decisive by itself.
The repository has one star and one fork, indicating very limited adoption and community coverage. Popularity is supporting evidence only, but it provides no compensating maintenance signal here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.2 | — | — |
illuminate/contracts Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.