The MIT license, included tests, and matching repository make the package transparent and straightforward to inspect. Maintenance is the main concern: it has had no release in over four years, no recent commits, and no security policy or scanning.
55%
Total Score
67
100
83
83
One registry maintainer is consistent with a user-owned project, but it provides limited visible publishing redundancy alongside the long period without releases.
The package has had four releases since June 2022 but none in the last 12 months; the latest release is now over four years old, indicating stalled maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with a repository whose last push was nearly three years ago and raising abandonment risk.
The repository has one star, zero forks, and one watcher. This offers little supporting evidence of community adoption, though popularity is only a secondary health signal.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0|^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.