Image compression for all pngs and jpgs uploaded to the backend (using the tinypng API)
68%
Total Score
caution
Recent releases and solid package documentation are offset by stalled commits, one maintainer, and weak workflow security hygiene.
The package and repository are owned by the same individual account, so the project has clear ownership but no organization-level backing shown by the provided evidence.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release and May 2026 push provide some compensation, but the short-term maintenance pause remains a concern.
No new issues or pull requests were recorded in the last month, but closed and open issue totals are unavailable, so this is limited evidence rather than a strong negative.
Composer build tooling is present, but no security scanning tools were detected, leaving a maintenance and supply-chain hygiene gap.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tinify/tinify Version ^1.6 | — | — |
typo3/cms-core Version ^14.2 | — | — |
typo3/cms-extbase Version ^13.4 || ^14.2 | — | — |
typo3/cms-filelist Version ^13.4 || ^14.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.