Provides the media entities.
55%
Total Score
caution
No releases or repository commits have appeared since July 2023, indicating a largely inactive project.
One registry maintainer is listed, which is a thin publishing base. The linked repository is owned by an organization, making the short registry list less concerning than it would be for an individual-backed project.
The package has only two releases, both in July 2023, with no releases in about three years. That is a meaningful maintenance concern, although a small configuration module may need few updates.
The repository had zero commits and zero active maintainers in the three months measured. Combined with the old last push, this supports a concern about inactivity rather than active maintenance.
Composer is used as the build tool, which fits the package ecosystem. No security-scanning tool was detected, a minor transparency and hygiene gap for a project with otherwise sparse activity.
The repository has no security policy. For a small configuration-only module this is a modest transparency gap, but it still leaves vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.