Package to parse identity documents like passports
72%
Total Score
caution
Usable with caveats: recent work comes from one contributor, and all workflow actions are unpinned.
The repository is owned by an individual rather than an organization, and the recent commit activity is also concentrated in that individual. This provides less visible maintenance redundancy than organization-backed projects.
One contributor made all 5 commits in the last 3 months, giving the project a bus factor of one. The active release cadence partly offsets this, but there is no demonstrated contributor redundancy.
The repository recorded 5 commits in the last 3 months, showing recent activity. However, all activity is concentrated in one active maintainer, limiting resilience if that person stops maintaining it.
Composer build tooling is present, but no security-scanning tool was detected. For a package handling identity documents and external OCR or face-detection services, that is a meaningful hygiene gap.
The repository has no security policy. This reduces transparency about how vulnerabilities should be reported and handled, especially for software processing identity documents.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^12.0||^13.0 | — | — |
intervention/image Version ^3.0 | — | — |
google/cloud-vision Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.