The package is small and focused, with documentation, a matching repository, and no install-time scripts. Its license record needs clarification before adoption, and the project offers little evidence of ongoing support.
42%
Total Score
25
100
69
83
The package has published 47 releases, but none in the last five years; its latest release was in March 2021. That long release gap is a strong abandonment concern for a framework integration.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release gap. This provides little evidence that compatibility or defects will be addressed.
The manifest declares MIT and a license file is present, but the artifact license text was detected as GPL-3.0. This mismatch should be resolved because it creates uncertainty about the terms consumers receive.
The repository is owned by an individual user rather than an organization. This does not prove poor maintenance, but it provides less visible institutional backing for a package already showing no recent activity.
The repository has one star, one fork, and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of review or sustained community use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clue/socket-raw Version ^1.5 | — | — |
illuminate/queue Version ^8.0 | — | — |
illuminate/support Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.