The repository remains available, organization-backed, clearly documented, and MIT-licensed with a small dependency footprint. However, registry releases stopped in August 2019, and the repository shows no commits or issue progress in the last three months.
58%
Total Score
67
100
88
75
The latest registry release was in August 2019, with no releases in the last 12 months; roughly seven years without a registry release is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, a direct sign of currently paused maintenance.
There were no new or closed issues and no new or merged pull requests in the last month, while three issues and two pull requests remain open; this indicates limited current project activity.
Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap, not a severe dependency risk by itself.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
neos/media Version >=5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.