The package is clearly licensed, stable, and has release notes for this version. Its source shows no recent maintenance, and the linked repository does not match the package name, making long-term support and provenance uncertain.
42%
Total Score
0
67
50
The latest registry release was published on October 22, 2018, with no releases in the following 12 months covered by the scan. This long release gap is strong evidence of abandonment risk despite the package's earlier release history.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with its last push being in October 2018. No provided signal shows compensating recent maintenance.
The repository name does not match the package name, and the README does not provide a package mention. That weakens confidence that the linked source clearly belongs to this package, although a sub-package or naming difference remains possible.
The repository has zero stars and forks and one watcher, providing little evidence of an active user or contributor community. Popularity is only supporting evidence, so this modestly reinforces the maintenance concern rather than deciding the verdict.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, but not severe enough to outweigh the larger maintenance concern on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cupoftea/package Version ~1.1 | — | — |
illuminate/support Version ^5.1 | — | — |
illuminate/container Version ^5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.