A PHP library for converting SVG to JPEG, PNG, and WEBP
55%
Total Score
caution
Usable with caveats: releases and recent commit activity have stopped, while CI uses broad permissions and unpinned actions.
Only one account has registry publish access, and project backing identifies a user-owned repository rather than an organization. This creates a thin maintainer base and less continuity if that maintainer stops contributing.
The package has only 3 releases since January 2023, with no release in the last 12 months and a median interval of about 282 days. This is meaningful evidence of slow maintenance, although the repository was pushed recently.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although its last push was more recent, the measured absence of current commit activity raises maintenance risk.
The repository has no security policy. That is a transparency and reporting gap for a library that processes image-related input, though it is not evidence of unsafe code by itself.
Version v0.1.2 is not a prerelease, but the package remains below 1.0, so API maturity is less established than for a stable-major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^6.2|^7.0 | — | — |
spatie/temporary-directory Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.