The README, release notes, stable version, and small dependency surface make integration clearer. However, no commits in the last three months, no license, and no security policy leave meaningful maintenance and transparency concerns.
58%
Total Score
25
100
72
83
Neither the package nor the linked repository declares or contains a recognized license. This is a material legal and transparency gap for a dependency.
There were zero commits and zero active maintainers in the last three months, despite the package being 280 days old. This is evidence of weak recent maintenance and raises abandonment risk.
The package and repository are owned by the same individual account, which provides consistent ownership context but does not demonstrate organizational maintenance capacity.
The package has 12 releases, all published on the same day, and no release activity afterward across 280 days. This shows initial activity but not an established ongoing maintenance pattern.
The repository has one star and no forks, showing limited external adoption. Popularity is only supporting evidence, so this modestly reduces confidence rather than determining the verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version * | — | — |
timothydc/exact-online-base-client Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.