rafaeldms/my-cropper
Documentation and packaging are solid, with tests, a README, and release notes. However, the solo project has had no release or commit activity for about 15 months, and it lacks a security policy and automated security scanning.
58%
Total Score
50
79
83
Health Score Breakdown
One registry maintainer is consistent with a small user-owned project, but it leaves little visible maintenance redundancy when combined with inactive commits.
The package has only three releases, all within about four days, and no release in roughly 15 months. This suggests limited ongoing maintenance despite a stable 1.0.2 version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional evidence of community adoption or review.
Composer is used for builds, but no security scanning tools are present. The missing scanning reduces maintenance hygiene for a package with runtime dependencies.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rafael Damasceno Ferreira |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rosell-dk/webp-convert Version 2.5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.