Its MIT licensing, stable versioning, and recent release provide a clear baseline. One star, no security policy, and only one release in the last 12 months leave limited evidence of broader support.
57%
Total Score
50
83
75
The package has existed for about 5 years and has 107 releases, but only one release in the last 12 months; the latest release is recent, which partly offsets the slow cadence.
The repository had zero commits and zero active maintainers in the last three months, which is a concrete sign of limited recent maintenance.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent and may not clearly establish package ownership.
One star, no forks, and two watchers provide little evidence of community review or support; popularity is only supporting evidence, but this weakens confidence.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
liip/imagine-bundle Version ^2.17 | — | — |
league/flysystem-ftp Version ^3.29 | — | — |
oneup/uploader-bundle Version ^5.1 | — | — |
oneup/flysystem-bundle Version ^4.14 | — | — |
league/flysystem-sftp-v3 Version ^3.30 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.