Documentation, tests, and a matching source repository provide useful transparency. The project has no recent registry releases and no recent commits, so maintenance risk remains.
55%
Total Score
50
50
67
75
The package has 57 releases but none in the last 12 months; its latest registry release was over nine years ago. This strongly reduces confidence in ongoing maintenance.
The package declares three runtime dependencies, including smottt/wideimage and tpyo/amazon-s3-php-class at dev-master. Unpinned development branches reduce reproducibility and increase dependency maintenance risk.
The package declares MIT and includes license files, but artifact detection also finds Apache-2.0 in bundled vendor content. The extra license appears associated with included dependencies, yet the mismatch warrants checking redistribution terms.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push in 2022. The non-archived status does not compensate for this prolonged inactivity.
The linked repository has zero stars and zero forks, with only two watchers. Popularity is not required for a healthy small package, but this offers little supporting evidence for long-term community backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
smottt/wideimage Version dev-master | — | — |
tpyo/amazon-s3-php-class Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.