Package Health

osflab/image

The package is clearly licensed, documented, tested, and backed by a matching organization repository. Its maintenance appears abandoned: the only release was in February 2018, with no commits or active maintainers in the past three months and no security policy.

Latest 3.0.0PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historydanger

There has been only one release, published in February 2018, and no releases in the last 12 months. This is strong evidence of abandonment for a package being assessed today.

Repo commit activitydanger

The repository had zero commits and zero active maintainers during the last three months. Combined with the 2018 last push, this materially increases abandonment risk.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no meaningful evidence of a broad support community.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. The missing scanning is a hygiene gap, while the build tooling itself is appropriate for this package.

Repository archivedcaution

The linked repository is not archived, which is a positive ownership signal. However, its last push was in April 2018, so the unarchived status does not establish active maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Guillaume Ponçon

Direct Dependencies

DependencyLast ReleaseScore
osflab/container
Version ~3.0.0
—
—
osflab/exception
Version ~3.0.0
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform