Clear licensing, repository tests, and readme documentation support dependable use. Recent work is concentrated in one contributor, and workflow references are not pinned, so maintenance and build reproducibility deserve attention.
78%
Total Score
75
100
94
75
All two recent commits came from one contributor, so recent maintenance has a concentrated bus factor; organization backing provides some handoff capacity but does not remove the concentration.
The repository had two commits in the last three months, showing recent work but a relatively light maintenance pace.
The project uses Make and Composer, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, making vulnerability-reporting expectations less clear for a library that processes image data.
All workflows were analyzed, read-only permissions are used, and no audit findings or untrusted execution sinks were reported. However, all 9 action references are unpinned, which weakens build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jbzoo/data Version ^8.0 | — | — |
jbzoo/utils Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.