The release is over six years old, has had no commits in the last three months, and lacks a security policy. Its README, repository tests, MIT license, and release notes provide useful documentation but do not offset the maintenance risk.
12%
Total Score
25
100
56
75
Packagist marks the entire package as abandoned, with no replacement supplied. This is a severe adoption risk because future fixes and compatibility work are not expected.
Only two releases were published, both on June 26, 2020, with no releases in the last 12 months. This indicates the package has been inactive for more than six years.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms there is no current maintenance activity to compensate for the old release history.
The linked repository is archived, and it was last pushed on June 26, 2020. An archived source project is a severe abandonment risk for a dependency.
The repository is owned by the DutchCodingCompany organization, which provides some ownership context. That backing does not compensate for the archived repository and absent recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nuwave/lighthouse Version ^4.8 | — | — |
illuminate/support Version 6.*|7.* | — | — |
illuminate/database Version 6.*|7.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.