The repository has had no commits for 3 months and is maintained by one person, which limits confidence in ongoing fixes. It has clear release notes, a README, matching source repository, and a valid MIT license.
56%
Total Score
50
100
88
50
Only one registry maintainer is listed, so publishing and maintenance depend on a single person; the linked repository is also owned by an individual rather than an organization.
Six releases were published in the last 12 months, but the latest was about 10 months ago, indicating an initially active project whose release cadence has since stopped.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reducing evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.