The project is a very small, single-maintainer library with no tests, changelog, or security scanning, limiting confidence in ongoing quality. Its MIT license, clear README, stable release, and absence of install scripts or workflow findings reduce adoption risk.
66%
Total Score
50
100
88
83
Only two releases have been published across roughly three years, with one release in the last 12 months; the recent release helps, but the overall cadence is sparse.
The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent package release.
Composer is used for builds, but no security scanning tools are present, leaving a modest transparency and maintenance gap for a package handling file downloads.
The repository has no security policy, so there is no stated process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skyzyx/mimetypes Version ~1.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.