52%
Total Score
caution
Usable with caveats: no release or repository activity since March 2020 raises abandonment risk.
The package has only two releases, with the latest published in March 2020 and none in the following six years. That long period without releases is a meaningful abandonment concern, although the package may be stable because its scope is small.
The repository has zero stars and forks and only one watcher, providing little community support or adoption evidence. Popularity is supporting evidence rather than a decisive health measure.
Composer is used for builds, but no security scanning tools are configured. For this small package that is a hygiene gap rather than a severe supply-chain concern.
The repository is not archived, but its last push was on March 18, 2020, consistent with the release history's long inactivity. The unarchived status is a small compensating signal, not evidence of active maintenance.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This modestly reduces transparency for a dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0 | — | — |
illuminate/support Version ~5.8.0|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.