A media manager to upload media files to multiple storages or select image from Unsplash, URL
45%
Total Score
unhealthy
No releases or commits for about three years, with high-confidence workflow audit findings adding supply-chain risk.
The package has four releases since April 2023, but none in the last 12 months and its latest release was about three years ago, indicating substantial maintenance inactivity.
There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating a serious risk of abandonment.
All four workflows were analyzed, but all eight action references are unpinned. High-confidence findings also flag spoofable actor conditions and an unpinned container image, creating material workflow supply-chain risk.
The repository has six stars, zero forks, and one watcher. This is limited supporting evidence, but popularity is not required for a small package and does not decide the assessment.
The linked repository is not archived, although its last push was about three years ago, so the non-archived status does not offset the observed inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
livewire/livewire Version ^2.10||^3.0 | — | — |
unsplash/unsplash Version ^3.2 | — | — |
illuminate/contracts Version ^8.0 || ^9.0 || ^10.0 | — | — |
omnia-digital/library Version * | — | — |
codeat3/blade-coolicons Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.