The package includes tests, a substantial README, and a matching MIT license. It has no install-time scripts and its repository is not archived, but release and commit activity indicate that maintenance has effectively stopped.
55%
Total Score
25
100
71
75
The package has six releases but none in the last 12 months, with the latest registry release on February 4, 2019. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is strong evidence of inactive maintenance.
There are six open issues and one open pull request, but no issues or pull requests were opened or merged in the last month. This supports a cautionary maintenance assessment.
The project uses Composer for builds, but no security-scanning tooling was detected. That is a hygiene gap, though it does not by itself show that the package is unsafe to depend on.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This lowers transparency for a package that processes media files.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
wapmorgan/mp3info Version ~0.0 | — | — |
bluemoehre/flac-php Version 1.0.2 | — | — |
wapmorgan/binary-stream Version ~0.4.0 | — | — |
wapmorgan/file-type-detector Version ^1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.