The package is narrowly scoped, has a matching source repository, and uses only two runtime dependencies. Its only two releases date from March 2020, and the repository has had no commits in over six years, leaving future compatibility support uncertain.
42%
Total Score
0
75
75
Only two releases were published, both in March 2020, with no release in more than six years. This provides little evidence of ongoing maintenance or compatibility updates.
The repository recorded zero commits and zero active maintainers during the last three months, while its last push was in April 2020. That sustained inactivity is a strong abandonment concern.
The package has no README, tests, or changelog, which weakens consumer guidance and verification for a Laravel integration library. The GitHub release for this version is a small compensating documentation signal, while absent package tests and changelog are normal packaging practice.
The repository has zero stars and forks and only one watcher, indicating very limited visible adoption. Popularity is supporting evidence rather than a verdict, but it provides no counterweight to the maintenance gap.
No security policy is present in the linked repository, leaving vulnerability-reporting expectations unclear. This is a secondary transparency gap, not evidence that the package is malicious.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5.5 | ~6.0 | ~7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.