jakobid/cdn-image
The package is clearly documented, licensed, and backed by tests and security tooling. Its one-person ownership and lack of activity for nearly four years make future compatibility and fixes uncertain; pin this version if you adopt it.
42%
Total Score
33
100
83
75
Health Score Breakdown
This package has had only one release, published nearly four years ago, with no releases in the last 12 months. That is strong evidence of stagnation for a dependency that may need framework and security updates.
There were zero commits and zero active maintainers in the last three months, consistent with the nearly four-year-old last push and indicating a serious abandonment risk.
Only one registry account has publish access, leaving a thin publishing base. The repository is user-owned, so there is no organizational backing shown to compensate for that concentration.
The registry namespace and repository are owned by the same individual account, and no organization backing is shown. This is consistent ownership but provides limited maintenance capacity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 jakobid |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^7.4|^8.0|^9.0 | — | — |
spatie/laravel-package-tools Version ^1.4.3 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.