Risky to adopt for a new project: the package has had no registry release for about 8 years and no recent repository commits. It remains licensed, documented, tested, and not deprecated or archived, but its long inactivity makes compatibility and maintenance uncertain.
45%
Total Score
25
75
100
The package has 17 releases, but the latest was about 8 years ago and there were no releases in the last 12 months. That long release gap is a substantial maintenance and compatibility concern despite a healthy early release cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing that development has effectively stopped. The non-archived status does not compensate for the absence of recent work.
There is one open issue, with no new or closed issues and no pull requests in the last month. This is consistent with a dormant project and provides no evidence of active support.
The linked repository is not archived, which is a positive sign, although its last push was about 8 years ago and therefore does not offset the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5.4 | — | — |
illuminate/database Version ~5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.