38%
Total Score
50
100
64
83
This package has only one release, published 12 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the repository not being archived.
Neither the package nor the linked repository provides a recognized license declaration or license file. This creates a real legal and adoption concern.
Only one registry maintainer is listed, leaving limited observable publishing capacity. The linked repository is also owned by an individual, with no organizational backing shown to compensate for that thin base.
The repository has 3 stars, 0 forks, and 1 watcher, providing little external adoption or community support evidence. Popularity is only supporting evidence, so this does not determine the verdict alone.
The repository uses Composer as its build tool, which is appropriate for a Packagist package. No security scanning is configured, a modest hygiene gap, but this is not severe by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 4.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.