The package has a clear README, tests, MIT licensing, a recent GitHub release, and no install-time scripts. Security documentation is absent, and the small project shows limited activity, so future maintenance capacity remains uncertain.
67%
Total Score
67
78
75
The package has five releases over about 3 years and 5 months, with one release in the last 12 months and a median interval of about 206 days; this indicates slow maintenance but not abandonment.
All one recent commit came from a single contributor, leaving maintenance dependent on one active person; the repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset that concentration.
There was one commit in the last 3 months, showing some current activity but a very low maintenance pace.
The repository has zero stars and forks and one watcher, indicating limited visible adoption; this is supporting context rather than evidence of unfitness on its own.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.