Security documentation and automated scanning are absent, and the repository has no visible community activity. The package is licensed, tested, documented, and has no install-time scripts, but maintenance appears slow.
64%
Total Score
75
86
75
The package has 28 releases since September 2019 and one release in the last 12 months, with the latest published in December 2025. This shows continued release capacity but a slow recent cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern. The recent release partly compensates, but does not show ongoing development.
Composer is used for builds, but no security-scanning tools were detected. That is a hygiene gap for a library with several runtime dependencies.
The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
sebastian/diff Version ^1.2 || ^2 || ^3 | — | — |
guzzlehttp/guzzle Version ~6.1 || ^7.4 | — | — |
masterminds/html5 Version * | — | — |
querypath/querypath Version >=3.0.4 | — | — |
marc1706/fast-image-size Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.