Clear documentation, a license, and a matching repository make its intended use easy to understand. Its single-user ownership and absent security policy add little resilience for a dependency this old.
38%
Total Score
50
75
50
The package has made no releases in the last 12 months, and its latest release was about seven years ago. Five releases were published close together in 2019, but this does not compensate for the long period without updates.
Only one registry maintainer is listed, leaving limited publishing continuity if that person becomes unavailable. The repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.
The repository is not archived, which means it remains available for maintenance, but its last push was about seven years ago and does not show active upkeep.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern compared with the much older release and repository activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.