The package is licensed, documented, tested in its repository, and has no install-time scripts. Its small footprint and limited contributor base make long-term continuity depend on one maintainer.
82%
Total Score
63
100
93
100
Only one registry account has publish access, consistent with the repository's single active contributor but leaving little publishing redundancy.
The repository is owned by an individual rather than an organization, so the concentrated contributor activity has no visible organizational handoff capacity to offset it.
All seven recent commits came from one contributor, so maintenance continuity is concentrated in a single person. The active recent work partly offsets the continuity risk but does not remove it.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest hygiene gap rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.