The package has a clear MIT license, matching source repository, and no install-time scripts. More than seven years without a release or repository push leaves maintenance and compatibility uncertain for a new dependency.
38%
Total Score
75
75
The latest release was published more than seven years ago, and there have been no releases in the last 12 months. Five releases over the earlier period show some initial activity, but the long shutdown is a strong abandonment concern.
The repository is not archived, which is a positive counter-signal, but it was last pushed more than seven years ago. The unchanged repository activity reinforces the release-history concern.
The repository has no security policy. For a package handling uploaded images, this reduces transparency around vulnerability reporting, although the absence is a secondary concern compared with the stale maintenance record.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
intervention/imagecache Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.