The package has clear licensing, tests, a focused dependency set, and no install-time scripts. Its last release and repository push were in June 2021, with no recent commits, so maintenance risk is the main caveat.
58%
Total Score
25
100
88
75
There were no commits and no active maintainers in the past three months. Combined with the last push being in June 2021, this indicates prolonged inactivity and meaningful abandonment risk.
The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the observed project backing but leaves limited redundancy.
The package has 10 releases since September 2020, but its latest release was June 2021 and it had no releases in the last 12 months. This long release gap lowers confidence in ongoing maintenance.
Composer build tooling is present, but no security-scanning tools were detected. For this small package, the missing scanner is a hygiene gap rather than a severe risk.
The repository has no security policy. This limits disclosure transparency, though it is a secondary concern for a small package with no other severe workflow findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.