Greenrivers Webp
58%
Total Score
caution
Usable with caveats: maintenance stopped in April 2023 and the project has little adoption.
The package has only two releases, with the latest published in April 2023 and none in the last 12 months. That is a meaningful maintenance concern for a Magento integration.
There were zero commits and zero active maintainers in the past three months, consistent with the last push being in April 2023. This materially raises abandonment risk.
The repository has one star, zero forks, and zero watchers. Low adoption is supporting caution about maturity, but it does not by itself establish that the package is unsafe to depend on.
Composer is used as the build tool, but no security scanning tools are configured. The missing automated security check is a hygiene gap rather than evidence of a defect.
The repository has no security policy. For a module integrated into a Magento application, that reduces transparency around vulnerability reporting and maintenance response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jcupitt/vips Version ~1.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.