The MIT license, clear README, repository tests, and matching source repository make the package easy to inspect and integrate. Its long inactivity, absent security policy, and six unpinned workflow actions leave meaningful maintenance and build-hygiene concerns.
57%
Total Score
50
100
78
83
The package has 12 releases over roughly 11 years, but none in the last 12 months and the latest release was in January 2021. This is strong evidence of prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months. Given that the latest push was in January 2021, this materially increases abandonment risk.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect project stability, but alongside zero recent commits it provides no evidence of active maintenance.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a modest hygiene gap rather than proof of unsafe code.
The linked repository is not archived, but its last push was in January 2021. The unarchived status is positive, while the old last-push date is consistent with the inactivity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.