Configurabe upload script for use with CLI and/or Typora
55%
Total Score
38
50
94
63
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the roughly three-year release gap and indicating substantial abandonment risk.
The package has 10 runtime dependencies for a CLI upload tool, including several Flysystem and CLI components; this is a meaningful dependency surface but not inherently excessive for its stated functionality.
A post-install-cmd script runs during installation, which adds some supply-chain and installation-behavior complexity; no provided signal shows that this is harmful or unusually risky.
Only one registry account has publishing access. The repository is user-owned rather than organization-owned, so this leaves limited visible publishing redundancy, although access records do not prove actual maintenance activity.
The registry namespace and repository owner match, providing consistent ownership evidence; the backing is an individual account, so there is no visible organizational continuity if that maintainer stops work.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.1 | — | — |
mnapoli/silly Version ^1.8 | — | — |
php-di/php-di Version ^6.0 | — | — |
league/flysystem Version ^3.0 | — | — |
league/flysystem-ftp Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.