Risky to depend on: the package has had no release in over ten years and its repository has not been updated since March 2016. It is not deprecated or archived and includes a license, README, and Composer metadata, but the long inactivity makes abandonment the deciding concern.
32%
Total Score
50
100
61
88
The package has only two releases, both from March 2016, with no releases in the last 12 months. More than ten years without a release is strong evidence of abandonment for a library dependency.
The linked repository is not archived, but its last push was in March 2016, consistent with the registry's lack of releases for over ten years. The repository remains available but appears inactive.
The package and repository are associated with individual user accounts rather than an organization-backed project. That is not inherently unsafe, but it offers less visible continuity support when combined with the lack of activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While a clean issue tracker can be positive, here it provides no evidence of current maintenance alongside the old last-push date.
The repository has zero stars and zero forks, with only three watchers. Popularity is not decisive by itself, but these counters provide little supporting evidence of adoption or an active community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.