The linked project is not archived and includes a consumer README plus a substantial repository test suite. However, no recent commit activity is visible, and the MIT declaration conflicts with the detected MIT-0 license; choose a maintained replacement.
40%
Total Score
75
58
Packagist marks the entire package as abandoned, with no distinct replacement identified. That is a major adoption risk even though the source repository remains available.
The package has only four releases since May 2021 and none in the last 12 months; its latest registry release was in January 2024, over two years ago.
A license file is present, but the manifest declares MIT while the artifact license file was detected as MIT-0. The mismatch creates legal ambiguity for downstream users.
The repository recorded zero commits and zero active maintainers in the last three months. This weakens the evidence that the package is actively maintained despite a later recorded push date elsewhere.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.