A single individual publishes it, and recent issue activity has not yet produced closures. The package is well documented, tested, licensed, stable, and has a substantial release history for a young project.
63%
Total Score
38
100
94
75
The repository has zero commits and zero active maintainers in the last three months. For a package that reached v1.6.1 recently, this is a meaningful maintenance slowdown.
Only one account has registry publish access, and the project backing signal identifies a user-owned repository rather than an organization. This leaves a thin publishing and maintenance base.
The registry namespace and repository owner correspond to the same individual-owned project. This makes ownership coherent, but it does not provide organizational redundancy.
There is one new issue and one new pull request in the last month, but no issues or pull requests were closed or merged. The volume is small, yet the lack of recent resolution adds some maintenance concern.
The repository uses Composer, but no security-scanning tools were detected. That is a transparency and maintenance gap for a package handling uploads, file operations, and permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^5.0 | — | — |
intervention/image Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.