Risky to adopt: it has had only one release, with no commits in the last three months and no visible community activity. The package is licensed, documented, non-deprecated, and its repository matches the package, but maintenance appears effectively dormant.
45%
Total Score
33
100
75
83
This is the only release, published about 3 years and 4 months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with an abandoned or dormant project. No provided activity signal compensates for this.
Only one registry maintainer is listed, which creates a thin publishing base. The matching repository and owner provide some continuity, but no contributor activity is shown to offset the bus-factor concern.
There were no new or merged pull requests and no new or closed issues in the last month. This supports the broader picture of inactivity, although the null open-issue count limits what can be concluded about unresolved problems.
The repository has 0 stars, forks, and watchers, providing no supporting evidence of adoption or a broader maintenance community. Low popularity alone is not disqualifying, but it increases reliance on the single maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.5 || ^6.0 || ^7.0 || ^8.0 | — | — |
yansongda/supports Version ^1.8 || ^2.0 | — | — |
illuminate/notifications Version ^5.5 || ^6.0 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.