This is a mature, actively released, stable package with 253 releases over roughly 7 years, 20 releases in the last 12 months, a recent release, an unarchived organization-owned repository, tests, and a clear MIT license. However, the linked repository reports no commits or active maintainers in the last 3 months despite the recent release, and it has no security policy or security-scanning tooling; zero repository popularity and no recent issue or pull-request activity provide little independent evidence of ongoing community health. It appears usable, but the maintenance and security-transparency gaps warrant review before making it a critical dependency.
65%
Total Score
63
100
89
90
Only one registry account has publishing access, which is a concentration risk, but the organization-owned repository provides some backing and makes a short registry access list less concerning.
The repository reports zero commits and zero active maintainers in the last 3 months, which conflicts with the recent registry release and suggests that current maintenance activity is not independently demonstrated.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not an abandonment verdict by itself, but it provides little evidence of active community maintenance.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counters provide no meaningful external adoption signal to offset the maintenance gaps.
Composer build tooling is present, but no security-scanning tools are detected. The build setup is appropriate, while the absent security tooling is a transparency and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/helpers Version ^1.1 | — | — |
laravel/framework Version * | — | — |
intervention/image Version ^2.3.0 | — | — |
spatie/image-optimizer Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.