Usable with caveats: the release is stable, licensed, tested, and backed by an active-looking repository, but recent repository activity is absent and security documentation is limited. Its small audience and single registry maintainer add modest adoption risk.
68%
Total Score
50
100
83
90
Only one account has registry publish access, which creates a narrow publishing base; this is partly consistent with the repository being owned by an individual, but it still leaves limited succession capacity.
The registry namespace and repository owner differ, but the repository is user-owned rather than organization-backed; this provides a real source location without evidence of broader institutional support.
Three releases over 235 days, with the latest released recently, show continued publication but a relatively sparse cadence and limited maturity history.
The repository recorded zero commits and zero active maintainers over the last 3 months. The recent push and release history provide some compensation, but current maintenance capacity remains uncertain.
There are no open issues or pull requests and no activity in the last month; this is not inherently negative, but it offers little evidence of an engaged user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alves/gfx-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.