Package Health

contributte/image-storage

The repository has tests, release notes, an organization behind it, and a documented security policy. Workflow references are not pinned, so build reproducibility is weaker than the otherwise solid project structure.

Latest v3.0.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package has 15 releases since November 2018, but none in the last 12 months; the latest registry release was about 18 months ago. This is a meaningful maintenance concern, though the repository remains active enough to avoid an abandonment verdict on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is the clearest abandonment concern, although the repository is not archived.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite two open issues and five open pull requests. This supports a caution about limited recent project activity.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected. This is a modest repository-hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts, script injection, or audit findings, and none grants top-level write access. However, all 8 action references are unpinned, weakening build reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pavel Janda

Direct Dependencies

DependencyLast ReleaseScore
nette/di
Version ^3.1.8
nette/http
Version ^3.2.3
latte/latte
Version ^3.0.12
nette/utils
Version ^4.0.3
nette/application
Version ^3.1.14

Weekly Downloads

Info

Last Published
2 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform