The small, single-maintainer project has little adoption evidence and no security scanning. Its MIT license, matching repository, and absence of install scripts reduce friction, but maintenance evidence is thin.
52%
Total Score
50
72
75
Only one registry account has publish access, and the linked repository is owned by an individual rather than an organization. This leaves limited visible publishing capacity if that maintainer becomes unavailable.
The package has no README, tests, or changelog, while the repository also reports no tests or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a real documentation gap for a library consumers must integrate.
The package has 10 releases since November 2018, but none in the last 12 months and the latest release was about 15 months ago. This indicates a meaningful maintenance slowdown.
The repository recorded no commits and no active maintainers in the last 3 months. Combined with the lack of recent releases, this is evidence of reduced ongoing maintenance.
The repository has 0 stars, 0 forks, and 1 watcher, offering little evidence of a broad user or contributor base. Popularity is supporting evidence only, so this is a modest concern rather than a decisive risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version * | — | — |
larangular/support Version ^0.1.0|^0.2.0 | — | — |
barryvdh/laravel-dompdf Version ^2.2.0|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.