Usable with caveats: it is a mature, clearly licensed package with a matching repository and a recent stable release. However, no commits or active maintainers were recorded in the last three months, and the repository has no security policy or scanning tooling.
72%
Total Score
75
100
94
88
No commits and no active maintainers were recorded during the last three months, despite the recent release. This weakens confidence in ongoing maintenance and is the main adoption caveat.
There are 18 open issues but no new or closed issues and no pull-request activity in the last month. This is a mild sign of limited current engagement, though it is not by itself evidence of abandonment.
Composer is used for the build, but no security-scanning tools are configured. For an image-processing library, this leaves a transparency and vulnerability-monitoring gap.
The repository has no security policy. Consumers therefore have no documented project process for reporting or handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/color-extractor Version 0.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.