The small dependency surface, clear README, and included tests reduce integration risk. However, there has been no release or commit activity since February 2017, and the license metadata conflicts with the detected license; pin this version only if the package is already required.
40%
Total Score
0
100
79
100
The package has had no releases in the last 12 months, and its latest release was in February 2017 despite being over nine years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
The manifest declares MIT, while the artifact license file was detected as BSD-2-Clause. A license file exists, but the mismatch creates a real legal and transparency concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.