A single maintainer and ten runtime dependencies increase maintenance and upgrade risk. The stable, non-deprecated release is a positive, but it has not been followed by newer releases.
35%
Total Score
50
50
67
The latest release was published in August 2018, with no releases in the last 12 months and more than eight years since the last update. This is strong evidence of abandonment risk.
Ten runtime dependencies create a substantial maintenance and compatibility surface for an old package, increasing the risk that its integrations no longer keep pace.
Only one registry publisher account is listed, leaving little visible maintainer capacity and creating a meaningful bus-factor concern alongside the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xooxx/json-api Version ^1.0 | — | — |
illuminate/cache Version >=4.2 | — | — |
illuminate/config Version >=4.2 | — | — |
illuminate/routing Version >=4.2 | — | — |
illuminate/support Version >=4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.