The artifact contains a substantial image-processing implementation, uses no install-time scripts, and declares MIT licensing. Its only release activity dates to December 2020, and the package listing lacks a README, leaving maintenance and usage guidance difficult to verify.
40%
Total Score
100
70
100
The package has only two releases, both on December 1, 2020, with no releases in the last 12 months. This long period without a new release is a strong abandonment concern.
The published artifact has no README, which is a meaningful documentation gap for an image-processing library that consumers must integrate. Missing tests and a changelog are normal for a published artifact and are not concerns by themselves.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fulcrum/http Version ~2 | — | — |
fulcrum/filesystem Version ~1 | — | — |
ksubileau/color-thief-php Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.