The package has a clear README, matching repository, MIT license, and no install-time scripts. Its single-maintainer project has no recent commits or issue resolution, so ongoing support is uncertain.
68%
Total Score
50
100
79
100
One registry maintainer is consistent with the user-owned repository, but it leaves little visible publishing redundancy if that maintainer becomes inactive.
The package is mature at about 9 years old, but has only 6 releases and 1 release in the last 12 months, indicating a modest maintenance cadence.
There were zero commits and zero active maintainers in the last 3 months; the recent release partly offsets this, but the absence of ongoing development is a real maintenance concern.
The repository has 5 open issues and 2 open pull requests, with no issues or pull requests closed or merged in the last month, suggesting limited recent responsiveness.
Composer build tooling is present, but no security-scanning tool was detected; this is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.6|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.