The README explains installation and usage, and the package has a license with only one runtime dependency. Its early 0.x status and no release in over two years make maintenance uncertain; the repository could not be found, so maintenance and provenance cannot be verified.
48%
Total Score
100
63
100
The package has only two releases, with the latest published over two years ago and no releases in the last 12 months. This is meaningful evidence of low maintenance activity for a dependency.
Version 0.2.0 is not a stable major release, so the API may still change and the project has limited maturity evidence. The absence of prereleases is mildly reassuring but does not offset the early version line.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
intervention/image Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.