alchemy/phpexiftool
This release appears generally suitable to depend on: it has a long release history, a stable major version, a non-deprecated registry status, a linked and non-archived organization-owned repository, clear MIT licensing, documented tests and changelog coverage, and no install-time lifecycle scripts. The main concern is thin recent maintenance evidence: only one commit from one active contributor in the last three months, with all recent commit activity concentrated in that contributor, while the repository has no security scanning or security policy. The package is usable, but dependency adoption should account for its limited current maintenance capacity.
78%
Total Score
63
50
94
90
Health Score Breakdown
The package declares 12 runtime dependencies, including several Symfony and Doctrine components; this is a meaningful dependency surface, though the signal provides no evidence that it is unmanaged or unsafe.
All recent commit activity comes from one contributor, creating a narrow current maintenance base; the organization-owned repository provides some capacity to hand off maintenance but does not remove the observed concentration.
Only 1 commit was recorded in the last three months, indicating limited recent maintenance activity despite the recent release evidence.
There are 5 open issues and 4 open pull requests, with 1 pull request merged in the last month; this shows some responsiveness, although issue closure activity is otherwise limited.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the repository.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Romain Neutron |
| Benoit Burnichon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/cache Version ^5 || ^6.2 || ^7.0 | — | — |
doctrine/cache Version ^1.0 | — | — |
symfony/console Version ^5 || ^6.2 || ^7 | — | — |
symfony/process Version ^5 || ^6 || ^7.4.5 | — | — |
exiftool/exiftool Version * | — | — |
Weekly Downloads
Info
- Last Published
- 27 days ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.