It includes a clear MIT license, tests, documentation, and a matching source repository. Its last release was in January 2016, with no commits in the latest three months and 11 unresolved issues, making maintenance a significant concern.
42%
Total Score
50
71
83
The package has had no releases in the last 12 months, and its latest release was in January 2016 despite being over 10 years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the latest three months, indicating no current maintenance activity.
There are 11 open issues, with no new or closed issues and no pull-request activity in the latest month. This supports the broader signs of stalled maintenance.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest hygiene gap, not a severe risk by itself.
The linked repository is not archived, which is a small compensating signal, although its last push was in February 2017 and does not offset the lack of current activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=4.2.0 | — | — |
illuminate/contracts Version >=4.2.0 | — | — |
symfony/http-foundation Version 2.7.*|~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.