The package is small and clearly scoped, with tests, a matching MIT license, and no install-time scripts. Its organization-backed repository is not archived, but it has had no release or commit activity since January 2022 and lacks a security policy.
45%
Total Score
50
75
75
The latest release was January 24, 2022, and there have been no releases in nearly four years. This is strong evidence of abandonment risk despite the package having four releases overall.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially reduces confidence that defects or compatibility issues will be addressed.
The linked repository has no security policy. For a package that processes application data, this leaves vulnerability-reporting and response expectations undocumented.
Version v0.1.2 is not a stable major release, so its public API may still change. This adds compatibility risk alongside the package's inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
intervention/image Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.