Risky to adopt for a new dependency: the package has seen no release or repository activity for about four years and only two releases. It remains licensed, tested, documented, and not deprecated or archived, but its long-term maintenance risk is substantial.
43%
Total Score
50
64
100
The package has only two releases, both in late 2021, with no releases in the last 12 months. This long period without a new release is a strong abandonment concern, despite the package remaining available.
There were no commits and no active maintainers in the last three months, consistent with the repository having been inactive for about four years. This is the clearest evidence of ongoing abandonment risk.
The repository has zero stars and forks and only one watcher, so there is little visible community attention to help sustain or review it. Popularity is supporting evidence, but these values add to the maintenance concern.
The repository is not archived, which means it remains open to maintenance. However, its last push was about four years ago, reinforcing the inactivity shown by the release and commit signals.
The assessed version is v0.2.0 rather than a stable major release, which indicates a relatively immature API. The absence of prerelease labeling provides only limited compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.