The source tree is substantial, licensed, and tested, with organization backing and no install-time scripts. Pin an actively maintained alternative or accept ownership of updates because this release has seen no maintenance for over three years.
43%
Total Score
50
100
75
83
The last release was on March 22, 2023, and there were no releases in the following 12 months; more than three years without a release is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, corroborating the long release gap and indicating no recent maintenance capacity.
The repository has zero stars and one fork, which offers little evidence of broad community support, but popularity is supporting evidence and does not outweigh the direct maintenance signals.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance-hygiene gap, not evidence of abandonment by itself.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear; this matters more for a media-handling package with upload-related modules.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
govcore/govcore_core Version ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.