Risky to adopt for new projects: the package has had no release or repository activity for about five years. It remains licensed, documented, tested, and not deprecated or archived, but its inactivity and very small user base make future support uncertain.
43%
Total Score
38
100
72
83
The latest release was about five years ago, with no releases in the last 12 months. That strongly raises abandonment risk despite a history of 16 releases.
There were zero commits and zero active maintainers in the last three months, with the repository otherwise last pushed about five years ago. This is strong evidence that maintenance has effectively stopped.
Only one registry maintainer is listed, leaving limited visible publishing capacity. This is more concerning because the repository is user-owned rather than organization-backed.
The registry namespace and repository owner match, which supports ownership continuity, but the owner is an individual rather than an organization and the activity indicators show no current backing.
There has been no new or closed issue or pull request activity in the last month, and one issue remains open. This offers no evidence of an active support community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^6|^7|^8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.