The package has a substantial component implementation, a clear README, and only one runtime dependency. Its latest release was over a year ago, with no commits in the last three months, while the single-user maintainer base and absent security scanning add modest concern.
61%
Total Score
67
100
88
88
Only one registry maintainer account is listed. That is a modest resilience concern for a user-owned project because continuity depends on a single publisher.
The package has 22 releases since July 2023, but none in the last 12 months; the latest release is from March 2025, indicating materially slowed maintenance.
There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence of currently quiet maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
The repository has no security policy. This weakens vulnerability-reporting transparency, though it is not by itself evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8|^9|^10|^11|^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.