Usable with caveats: the package is licensed, clearly backed by an organization, documented, tested in its repository, and not archived or deprecated. However, it has had no commits or active maintainers in the last three months, and its repository lacks security scanning and a formal security policy.
72%
Total Score
83
100
83
67
The package has existed for about 2 years and 5 months with four releases, including two in the last 12 months. The roughly 11-month median release interval indicates measured rather than rapid maintenance.
There were zero commits and zero active maintainers during the last three months. The recent release and same-day repository push partly offset this, but the lack of ongoing activity is a real maintenance concern.
The repository has only 2 stars, 0 forks, and 1 watcher, indicating limited community adoption or review. Popularity is supporting evidence rather than a decisive problem for a small package.
Composer build tooling is present, but no security scanning tool is configured, leaving a security-hygiene gap that is not otherwise compensated by the collected tooling signals.
The repository has no formal security policy. The README provides a security contact, which is helpful, but it does not fully replace a documented repository security process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.