Testing, documentation, and a clear MIT license support adoption. The small maintainer base and limited recent release activity leave less backup if maintenance stops.
67%
Total Score
50
100
88
75
The repository is owned by a user account rather than an organization, so the single-contributor and single-maintainer concerns are not offset by visible organizational backing.
The package has only 2 releases over about 3 years, with no releases in the last 12 months and roughly 678 days between releases. That is a meaningful maintenance concern, despite a latest release in February 2025.
All recent commits came from one contributor, leaving maintenance dependent on a single active contributor.
Only 1 commit was recorded in the last 3 months, indicating limited current development activity.
Composer is used for builds, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0|^7.0|^8.0|^9.0|^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.