The small codebase includes tests and a matching source repository, which makes its structure easy to inspect. Its long inactivity and missing license make future maintenance and permitted use uncertain.
35%
Total Score
0
57
50
The package has only one release, published over 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency intended for ongoing use.
There were no commits and no active maintainers in the last three months, consistent with a project that has been dormant since 2014. This materially increases abandonment risk.
No license is declared, and neither the package nor the linked repository contains a license file. That leaves the terms for using this dependency unclear.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no adoption signal to offset the long inactivity.
The repository uses Composer, which supports reproducible PHP packaging, but no security scanning tools were detected. This is a secondary hygiene gap beside the much stronger maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 4.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.