The package has a matching Apache-2.0 license, no install-time scripts, and a clear README explaining its type-definition role. Its tiny repository and lack of security policy leave little evidence beyond the initial publication.
66%
Total Score
75
100
88
88
This package is 0 days old with only one release, so there is no demonstrated release cadence or track record yet.
There were 0 commits and 0 active maintainers in the last 3 months, but the repository and package were created only recently, so this is limited evidence rather than proof of abandonment.
Composer is used as the build tool, fitting the package ecosystem, but no security scanning tools were detected, leaving a modest transparency gap.
The repository has no security policy. For a tiny type-definition metapackage this is a minor hygiene gap, but it reduces clarity about vulnerability reporting.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/spatie-image-impl Version ~3.9.6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.