marcha/image2
The package is licensed, documented, and backed by repository tests. Its workflow uses two unpinned actions and the repository has no security scanning or security policy, so pinning version 2.4 requires added maintenance caution.
48%
Total Score
25
79
75
Health Score Breakdown
All six releases arrived within minutes on 31 May 2024, and there have been no releases in the last 12 months despite the package being about two years old. This is strong evidence of stalled maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with the absence of recent releases and indicating a meaningful abandonment risk.
Only one registry maintainer is listed, leaving the package dependent on a single publisher. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader maintenance capacity.
Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package intended for application integration.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nikola Marčić |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 imagecow/imagecow Version ^2.4 | — | — |
illuminate/contracts Version ^10.0||^11.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.