The small repository has limited maintenance and security-process evidence, reducing confidence in future support. The MIT manifest conflicts with the GPL-3.0 license file, so resolve licensing before adoption.
42%
Total Score
50
67
75
The latest release was about six years ago, with no releases in the past 12 months; the nine-release history shows an established package but not current maintenance.
There were no commits and no active maintainers in the past three months, reinforcing the long release gap and increasing abandonment risk.
A license file is present, but it is identified as GPL-3.0 while the manifest declares MIT; this mismatch needs clarification before use.
The repository has one open issue but no issues or pull requests opened or closed in the past month, showing little recent project activity.
The repository has only 3 stars and 4 forks, providing little evidence of broad community support; popularity is supporting evidence rather than a verdict.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.