The package includes tests, a substantial README, a matching repository, and a documented GitHub release. Its maintenance has gone quiet, and every analyzed workflow uses unpinned actions; the missing security policy adds a smaller transparency concern.
57%
Total Score
63
100
83
67
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and raising abandonment risk.
The package has only three releases and no releases in the last 12 months; the latest release was January 22, 2025, indicating a long release gap for a package still being assessed in September 2026.
There were no new or closed issues or pull requests in the measured month, and no pull requests were open; this provides no recent evidence of community maintenance, though issue counts are partly unknown.
The repository has two stars and no forks or watchers, showing very limited adoption evidence; popularity is supporting evidence, so this lowers confidence more than it determines the verdict.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.37|^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.