Documentation and licensing are in place, and installation has no lifecycle scripts. However, the only release was over seven years ago and the repository has had no commits or active maintainers in the last three months, making abandonment a serious concern.
38%
Total Score
38
50
72
83
There has been only one release, published over seven years ago, with no releases in the last 12 months. That strongly suggests the package is abandoned or no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release, this is strong evidence of abandonment.
The package has five runtime dependencies and no development dependencies. This is a manageable runtime footprint, though the absence of declared development dependencies provides little evidence of ongoing project maintenance.
One registry account has publish access. That is a thin publishing base, and the available project-backing signal identifies an individual-owned repository rather than organizational backing.
The source repository is owned by a user account rather than an organization, so the single maintainer and inactive repository provide no organizational backing to compensate for the maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ~1.19 | — | — |
illuminate/support Version 5.1.* | — | — |
illuminate/container Version 5.1.* | — | — |
illuminate/contracts Version 5.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.