This is a usable, actively maintained release with a stable major version, 13 releases in the last 12 months, a non-archived repository, and recent commit activity. However, maintenance is concentrated entirely in one contributor, the repository has no tests, changelog, security policy, or security scanning, and the project has no observed community activity or adoption signals. The package is not deprecated and has a clear MIT declaration, so it is not unfit to depend on, but adopters should account for limited bus factor and modest transparency, especially for a file-upload and storage component.
68%
Total Score
63
100
83
75
Only one registry account has publish access. This is not decisive by itself because registry access lists do not measure actual maintenance, but it is consistent with the repository's single-contributor risk.
A substantial README documents installation, routes, and usage, but neither the artifact nor repository contains tests or a changelog. For a framework bundle handling uploads and file operations, the absence of repository tests is a meaningful maintenance and regression-risk gap.
The repository is owned by an individual user rather than an organization, so there is no organizational backing to compensate for the concentrated contributor base.
All 16 commits in the last 3 months came from one contributor, with a 100% top-contributor share. This creates a genuine continuity and response risk for adopters.
The repository has zero stars, forks, and watchers, so there is no observed community adoption or external validation. Popularity is supporting evidence rather than a verdict, but this leaves the package's durability less demonstrated.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
imagine/imagine Version ^1.0 | — | — |
league/flysystem Version ^3.0 | — | — |
league/flysystem-bundle Version ^3.0 | — | — |
symfony/framework-bundle Version ^7.1 | — | — |
league/flysystem-aws-s3-v3 Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.