Consumer documentation is clear, the dependency surface is small, and the package includes tests. Maintenance appears paused, while the license declaration conflicts with the detected MIT license and repository security coverage is limited.
64%
Total Score
75
100
81
88
The artifact includes an MIT license file, but the manifest declares the package proprietary; that inconsistency creates avoidable licensing uncertainty despite the repository also containing a license file.
The package has five releases since June 2022, but none in the 12 months before collection and the latest release was in June 2025, indicating a meaningful maintenance pause.
There were no commits and no active maintainers in the three months before collection, reinforcing the release-history evidence that current maintenance has stalled.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the repository.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.