The MIT license, clear README, and small dependency set make the package easy to evaluate and integrate. Its lone publisher and absent security policy add maintenance risk, while the repository shows no recent development.
38%
Total Score
33
100
83
50
The latest release was in September 2015, with no releases in the last 12 months; this long gap is strong evidence of abandonment risk.
The repository had zero commits and zero active maintainers in the last 3 months, confirming that development is currently inactive.
A post-install command runs during installation, adding execution surface that deserves review; no provided signal shows it is harmful.
Only one registry publisher is listed, and the repository is user-owned rather than organization-backed; this leaves limited visible maintainer capacity.
There were no new or closed issues or pull requests in the last month, alongside five open issues, which provides no evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.