Thumbnail generator for Sculpin-based websites
68%
Total Score
67
100
79
75
Only one registry account has publishing access. Because the linked repository is user-owned rather than organization-owned, there is no provided backing signal to offset that concentration.
The package is mature at over 11 years old and had two releases in the last 12 months, but its median release interval is about 1 year and 4 months, indicating a slow cadence.
All 13 recent commits came from one contributor, so maintenance continuity depends heavily on a single person.
Composer build tooling is present, but no security scanning tool was detected, leaving security-focused maintenance less visible.
The repository has no security policy, so users have no documented vulnerability-reporting process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/filesystem Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.