The package is well documented and tested, with a clear MIT license and security policy. Its long release pause and absent recent repository activity make ongoing maintenance uncertain.
53%
Total Score
50
79
100
The package has 46 releases since 2019, but none in the last 12 months and its latest release was in January 2022, indicating a prolonged maintenance pause.
Only one registry publishing account is listed. That is a limited publishing base for a user-owned project and increases continuity risk when combined with the inactive repository.
The repository recorded zero commits and zero active maintainers in the last 3 months, providing no evidence of current development capacity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the maintenance pause.
The single workflow was fully analyzed with no audit findings or untrusted checkouts, but its one action use is unpinned, leaving a small reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/filesystem Version ^4.0 || ^5.0 || ^6.0 | — | — |
php-ffmpeg/php-ffmpeg Version ^0.15 || 0.16 || 0.17 || 0.18 || 0.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.