The tiny four-file tree and one-star repository offer little evidence of mature maintenance. It has a clear MIT license, README, and no install scripts, but no security policy or scanning.
42%
Total Score
100
72
67
The package has made only two releases, both in January 2018, with no release in over 8 years. This is strong evidence of abandonment risk for a dependency.
The package and repository each contain only four files, including one provider class, which suggests a small focused integration but leaves little evidence of a mature project around it.
The repository has 1 star, 0 forks, and 1 watcher, providing little supporting evidence of broad review or community adoption. Low popularity alone is not disqualifying but reinforces the thin maintenance picture.
Composer is used for the build, but no security scanning tools were detected. That reduces supply-chain maintenance transparency.
The repository is not archived, which preserves a path for maintenance, but its last push was in January 2018 and does not offset the long release gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vicens/alidayu Version ^1.0 | — | — |
illuminate/support Version ^5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.