Clear documentation, tests, a changelog, and an explicit GPL-3.0 license make the package transparent to inspect. Its small dependency set and lack of install-time scripts reduce integration risk, but the project offers little evidence of current support.
42%
Total Score
25
100
75
100
The package has only one release, published over five years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a package intended for ongoing framework integration.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this lack of recent activity.
There were no new or merged pull requests and no issue activity in the last month. Because the package is already several years old, this adds to the concern that support has stopped.
The repository has zero stars, forks, and watchers, providing no supporting evidence of community adoption or outside maintenance. Popularity is only supporting evidence, so this remains a caution rather than a verdict by itself.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not a standalone adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.