The package includes a README, tests, and a stable release, and its repository clearly matches the package. A single maintainer, missing licensing information, and no security policy reduce transparency and resilience for future maintenance.
38%
Total Score
33
50
75
50
The package has had no release in more than four years, with zero releases in the last 12 months. This is strong evidence of stalled maintenance despite its seven-release history.
There were no commits and no active maintainers in the last three months, consistent with the absence of releases since 2022 and indicating a high abandonment risk.
Seven runtime dependencies make the package rely on a moderately broad dependency chain, increasing maintenance surface compared with a minimal library.
No license is declared, and neither the package nor the repository contains a recognized license file. That creates a material legal and transparency concern for dependency adoption.
A post-install command runs during installation, adding an install-time behavior that consumers must trust and maintain in their build environment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
illuminate/support Version ^8.83 | — | — |
pierreminiggio/youtube-video-updater Version ^2.0 | — | — |
pierreminiggio/heropost-youtube-posting Version ^2.0 | — | — |
pierreminiggio/youtube-thumbnail-uploader Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.