The package includes tests, a changelog, a clear MIT license, and a small dependency surface. Its repository remains active in status and clearly matches the package, but security scanning and a published security policy are absent.
58%
Total Score
50
100
78
83
The package has 79 releases since 2015, but none in the last 12 months and its latest release was in March 2021. This long release gap is a substantial maintenance concern despite the previously regular release history.
There were no commits and no active maintainers in the past three months. Combined with the old latest release, this points to limited current maintenance capacity.
There were no new or closed issues and no pull-request activity in the past month, with no open pull requests. This is consistent with a quiet project and provides little evidence of ongoing support.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap for a dependency project, not evidence of maliciousness.
The linked repository is not archived and was last pushed in March 2023. That is reassuring, although it still leaves a multi-year gap in observed activity relative to this assessment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.