ttree/mediautility
Its narrow scope and simple dependency profile limit integration complexity. The package has a clear README, matching repository, and no install-time scripts, but no security policy and no automated security scanning.
43%
Total Score
0
100
67
75
Health Score Breakdown
The package has only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the package may be intentionally stable.
The repository has recorded zero commits and zero active maintainers in the last three months, while its last push was about 10 years ago. This substantially weakens confidence in ongoing maintenance.
A license file is present and the repository also has one, but the manifest declares MIT while the artifact license is detected as BSD-3-Clause. The mismatch creates avoidable legal and transparency uncertainty.
Composer is used as the build tool, which fits the package, but no security-scanning tooling is present. This is a minor hygiene concern rather than evidence that the package is unsafe.
The linked repository has no security policy. For a small utility package this is a modest transparency gap, but it leaves vulnerability-reporting expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/media Version ~2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.