It includes tests, a clear README, matching MIT licensing, and no install scripts. The repository is unarchived but has little visible adoption and no published security policy.
61%
Total Score
100
100
83
75
The package has had no registry release for about 11 years, despite five total releases; this raises maintenance and compatibility concerns. The repository was pushed more recently, which partly offsets the long release gap.
The repository has only 3 stars, 0 forks, and 1 watcher, indicating limited external adoption and a thin supporting ecosystem. Popularity is supporting evidence rather than a verdict by itself.
Composer is used as the build tool, but no security scanning tool is reported. The missing scanner is a modest transparency gap rather than evidence of unsafe behavior.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not severe enough to make the release unfit on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.