The focused scope and small dependency set keep adoption straightforward. Ongoing maintenance is uncertain, with no recent commits and only one contributor; pin this version unless you can accept limited future support.
58%
Total Score
63
100
83
75
One registry maintainer is consistent with a small personal package, but it indicates limited publishing redundancy when combined with the absence of recent activity.
The repository is owned by an individual user rather than an organization, and the single-person backing offers limited continuity if the maintainer stops supporting the package.
The package has only one release, published 824 days ago, with no releases in the last 12 months. This leaves little evidence of sustained maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has been dormant since its initial release.
Composer is used for the build, but no security scanning tool is configured. The missing scan is a modest transparency gap, not a severe dependency risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0|^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.