Usable with caveats: it is actively releasing, licensed, tested, and not deprecated, but it is a young package maintained by one person with limited recent commit activity and no security policy.
68%
Total Score
50
100
88
88
Only one registry account has publish access. This is a real continuity concern for a user-owned project because publishing and release responsibility are concentrated in one person.
The repository is owned by an individual user rather than an organization, so the single-maintainer and concentrated-contributor risks are not offset by visible organizational backing.
The package is young at 138 days but has shipped 8 releases, all within the last 12 months, with a median interval of about 21 hours; this shows active publishing but limited long-term history.
One contributor made 100% of the 2 recent commits, leaving no demonstrated backup maintainer and increasing continuity risk.
The repository recorded only 2 commits in the last 3 months, all from one active maintainer. Recent activity exists, but the low volume limits evidence of sustained maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.