The package includes a README, tests, changelog, and a small dependency set. Its last release was over five years ago, and the repository could not be found, leaving maintenance and provenance difficult to verify.
47%
Total Score
50
100
80
100
The package has had no release in over five years despite being nearly eight years old, which is a substantial abandonment concern. Its prior release cadence was regular enough to provide some maturity evidence, but not enough to offset the long inactivity.
Only one registry account has publish access, creating a thin operational base if that maintainer is inactive. The signal describes access rather than actual maintenance activity, so it is a moderate concern rather than proof of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
judahnator/json-manipulator Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.