Usable with caveats: it is licensed, documented, tested in the repository, and not deprecated or archived. However, the project is still pre-1.0, has had no commits in the last three months, and has limited adoption and security-process coverage.
68%
Total Score
67
100
78
83
The package and repository are backed by the same individual account, so the ownership relationship is clear, although it does not provide organizational redundancy.
Nine releases over about 18 months and two releases in the last 12 months show ongoing publication, though the recent cadence is modest for a young package.
There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the recent repository push and release evidence.
Three stars, no forks, and two watchers indicate limited community adoption; this is supporting caution rather than evidence of abandonment by itself.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a security-process gap for a package that handles uploaded model files.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.