The MIT license, small dependency set, and matching repository make the package easy to inspect and integrate. Its maintenance signals are effectively dormant, so choose an actively maintained alternative rather than pinning this release.
18%
Total Score
0
100
64
50
Packagist marks the entire package as abandoned, with no replacement identified. Package-level deprecation is a severe dependency risk even though the release itself is stable.
The package has had no release in over five years; all eight releases occurred shortly after the first release in 2021. This strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and leaving little evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher, offering little community evidence to compensate for the inactive maintainer.
The repository has no security policy or security scanning tools. This is a secondary transparency gap, particularly for a package that has otherwise stopped receiving maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~7|~8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.