The package has a clear MIT license, a changelog, a readable package tree, and no install-time scripts. Its small dependency surface helps, but limited project safeguards and low repository activity increase maintenance risk.
55%
Total Score
50
100
75
75
The package has 9 releases but none in the last 12 months, and the latest release was published in April 2022. This long period without a release is a meaningful maintenance concern.
The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with the old latest release, this supports a concern about dormant maintenance.
The repository name matches the package, which supports the link, but the README does not mention the package name. That leaves a small transparency gap about the repository's package relationship.
The repository has 0 stars and 0 forks and only 1 watcher. Popularity is not decisive, but these counters provide little supporting evidence of broader project adoption or review.
Composer is used for the build, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.