The MIT license, focused eight-file package, and clear README make its contents easy to assess. Organization backing and no install-time scripts provide some reassurance despite the limited project footprint.
55%
Total Score
50
100
75
75
The package has had no release in about five years, with 10 releases overall and none in the last 12 months. This is a substantial maintenance concern for a dependency, though a small focused package may change infrequently.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance activity is absent.
The repository has 3 stars, 0 forks, and 1 watcher, showing a very small user and contributor footprint. Popularity is supporting evidence rather than a verdict, but it offers little backup if maintenance is needed.
The repository has no security policy. For a small package this is a transparency gap, although the package has a limited file footprint and no collected evidence of a security incident.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rosell-dk/webp-convert Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.