A small but handy package to prevent malicious code execution coming into your application through uploaded image files.
72%
Total Score
caution
Usable with caveats: recent releases are reassuring, but maintenance is concentrated in one contributor.
One contributor made all commits in the last 3 months, so maintenance capacity is concentrated. Organization ownership provides some handoff capacity but does not remove the current concentration.
Only 1 commit was recorded in the last 3 months, which shows recent activity but a very light maintenance pace.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than a severe risk.
The repository has no security policy. For a package intended to sanitize uploaded images, this is a meaningful transparency gap, though it is not evidence of a security defect.
The only workflow was fully analyzed with no high-confidence findings or untrusted checkouts, but both action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.0|^13.0 | — | — |
illuminate/support Version ^12.0|^13.0 | — | — |
intervention/image Version ^4.0 | — | — |
illuminate/container Version ^12.0|^13.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.