The package is clearly licensed and has a complete README, release notes, repository tests, and matching source project. Its small audience, absent security policy, and unpinned workflow actions leave less evidence and automation hygiene than mature dependencies.
62%
Total Score
50
100
86
67
The package has seven releases over about two years, with a median interval of about 40 days, but only one release in the last 12 months; this indicates slowing delivery.
The repository recorded zero commits and zero active maintainers over the last three months, leaving a meaningful maintenance and abandonment concern.
The repository has one star, no forks, and no watchers. Popularity is only supporting evidence, but these very low figures provide little external evidence of sustained use or review.
The repository has no security policy, which reduces transparency about how vulnerabilities are reported and handled for a package used in applications.
The only workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving avoidable automation supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0 || ^10.0 || ^11.0 || ^12.0 || ^13.0 | — | — |
symfony/http-foundation Version ^6.0 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.