Package Health

maestroerror/php-heic-to-jpg

Converts HEIC/HEIF image to JPG type, without any dependencies

Latest v1.0.8PackagistPackagist

66%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package has 15 releases since January 2023, but none in the last 12 months; its latest release was over a year ago. Earlier releases were reasonably regular, which partly offsets the current pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with a project that has been inactive since its June 2025 release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 16 issues and 3 pull requests remain open. This supports the maintenance concern, although it is weaker evidence than the commit inactivity.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 6 action references are unpinned, leaving avoidable supply-chain hygiene risk.

Vulnerabilities

TitleVersionsSeverity
CVE-2024-48514
maestroerror/php-heic-to-jpg is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 1.0.5.
0.0.0 - 1.0.5
Critical

Package versions

Maintainers

maestroerror

Direct Dependencies

DependencyLast ReleaseScore
maestroerror/heif-converter
Version 0.2
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform