The MIT license, matching repository, and straightforward Composer dependency profile provide a clear starting point. Its very recent publication leaves maintenance maturity unproven, and the repository has no security policy.
62%
Total Score
100
92
75
This release was published today and is the package's only release, so there is no observed release cadence or maintenance track record yet.
The linked repository has no security policy. This is a transparency and issue-handling gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
intervention/image Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.