The README, MIT license, matching repository, and small dependency surface make adoption straightforward. There are no tests or security policy, so pinning this version is preferable for production.
64%
Total Score
50
100
90
75
The registry namespace and repository are owned by the same individual, providing clear ownership context. The individual rather than an organization means the maintainer base remains relatively narrow.
The package has 14 releases since February 2018, but none in the last 12 months; its latest release was in January 2025, about 1 year and 8 months ago. This indicates materially slowed maintenance.
The repository recorded no commits and no active maintainers in the three months before collection. The recent release provides some evidence of ownership, but current development activity is absent.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency and maintenance gap for a production dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.