Documentation, tests, and the MIT license support straightforward adoption. Limited dependencies and no install-time scripts are helpful, but workflow hygiene remains below a mature project's standard.
58%
Total Score
38
100
81
83
There were zero commits and zero active maintainers in the last three months, indicating a meaningful maintenance and abandonment risk for a relatively new package.
Only one registry account has publishing access. The repository is user-owned rather than organization-backed, so there is little observed publishing redundancy.
The registry namespace and repository owner match, but the owner is an individual user rather than an organization, providing limited backing evidence.
The package is about six months old but has only two releases, both on the same day, so its long-term maintenance record is still limited.
No new issues or pull requests were recorded in the last month, and no pull requests were merged; this provides no evidence of active support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0 || ^7.0 || ^8.0 || ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
openspout/openspout Version ^4.24 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.