The package is licensed, has release notes, and is clearly linked to its source repository. Ongoing maintenance and security coverage are limited, so pin this version and validate it against your PHP/editor setup.
58%
Total Score
67
88
50
The package has only 5 releases and none in the last 12 months; its latest release was on March 7, 2024. This indicates a meaningful maintenance slowdown for a library with ongoing integration and security needs.
The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the extended pause since the latest release. This raises abandonment risk, although the repository is not archived.
There are no open issues or pull requests and no issue or pull request activity in the last month. This is consistent with a quiet project, but offers no evidence of active community maintenance.
Composer build tooling is present, but no security scanning tools were detected. That limits automated security coverage for a file-management package handling uploads and downloads.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The lack of a policy is partly offset by the package's clear source repository and license, but remains a transparency gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.