The package is clearly licensed and has a focused README. Its own documentation says it is not production-ready, while no releases have appeared in years and recent commit activity is absent.
43%
Total Score
0
79
83
The package was last released in November 2019 and has had no releases in the past 12 months, indicating prolonged release inactivity.
There were no commits and no active maintainers in the three-month observation window, reinforcing the lack of recent maintenance.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap for a library handling image files.
The repository has no security policy, leaving no documented channel or process for reporting security issues.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.