Clear documentation, tests, release notes, and an MIT license make this package easy to inspect. The tiny repository, low adoption, and absent security policy provide little reassurance beyond its frozen maintenance history.
38%
Total Score
67
75
The package has had no release in more than 10 years: all three releases arrived in January 2016, with none in the last 12 months. This is strong evidence of abandonment for a framework integration package.
The repository has only 2 stars, 0 forks, and 2 watchers. Popularity is not decisive for a small package, but these figures provide little supporting evidence when maintenance is already stale.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was in January 2016. The inactive repository still lowers confidence in ongoing maintenance.
The repository has no security policy. This is a hygiene and transparency gap, though it is less important than the much older maintenance history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/console Version 5.2.* | — | — |
illuminate/support Version 5.2.* | — | — |
nobox/lazy-strings Version ^5.0 | — | — |
illuminate/filesystem Version 5.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.