locomotivemtl/charcoal-contrib-tinify
Charcoal service provider for optimizing JPG and PNG assets.
52%
Total Score
caution
No releases or commits for about five years, despite the repository remaining active and the package not being deprecated.
Health Score Breakdown
The package has three runtime dependencies, including PHP, charcoal-admin, and tinify, which is a moderate and understandable dependency surface. The older PHP compatibility range may increase integration risk today.
The latest release was published about five years ago, and there were no releases in the last 12 months. The package had a regular early cadence, but the prolonged release gap raises maintenance and compatibility concerns.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is meaningful abandonment risk even though the repository is not archived.
Composer is used as the build tool, matching the package ecosystem. No security scanning tool was detected, which is a modest transparency gap but not decisive for package health.
Version 0.1.3.2 is not marked as a prerelease, and recent releases had no prerelease share. The sub-1.0 version still suggests a less mature compatibility commitment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Locomotive |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tinify/tinify Version ^1.5 | — | — |
locomotivemtl/charcoal-admin Version >= 0.16.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.