This is a generally usable and transparent package: it has been maintained since 2020, published five releases in the last 12 months, has a stable current version, includes its README, changelog, tests, license, and a focused file tree, and is backed by a matching repository. The main concerns are the single registry maintainer, very small repository footprint, only four stars, no commits or active maintainers in the last three months, and no security policy or security-scanning tooling. The latest release and recent repository push show ongoing publishing activity, so these concerns indicate moderate maintenance and bus-factor risk rather than abandonment.
72%
Total Score
50
100
89
90
Only one account has registry publish access, creating a meaningful bus-factor and continuity concern; the recent release history partly compensates by demonstrating that the maintainer is still publishing.
The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the single-maintainer continuity risk.
There were 0 commits and 0 active maintainers in the last 3 months, indicating a recent lull in development. The current release and recent repository push provide partial compensating evidence, so this is a caution rather than a severe abandonment finding.
There are no open issues or pull requests and no activity in the last month; this avoids an unresolved-maintenance backlog, but also provides little evidence of an active community.
The repository has only 4 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence of limited adoption and community capacity, but it is not independently decisive for a small focused package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.