This is a usable, licensed, stable package with a long release history, recent release activity, tests, and no deprecation or install-time lifecycle scripts. However, maintenance evidence is mixed: the repository recorded zero commits and zero active maintainers in the last 3 months, has only 2 stars and 1 fork, lacks a security policy and security scanning, and does not clearly match or mention the package, which weakens transparency and raises abandonment or repository-association concerns. It is reasonable to evaluate for adoption, but a developer should verify the repository/package linkage and be prepared to assume additional maintenance risk.
62%
Total Score
50
50
83
75
Eight runtime dependencies, including framework and storage/image integrations, create a meaningful dependency surface that increases transitive maintenance burden, though the profile is not by itself severe.
The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to offset the package's thin community and maintenance signals.
The repository has 0 commits and 0 active maintainers in the last 3 months, a significant sign that maintenance may have slowed or stopped; the recent repository push and recent releases provide only partial compensation.
There are no new or closed issues in the last month and two open pull requests remain unmerged, indicating limited visible issue-management activity despite some pending contribution activity.
The repository name does not match the package name, and its README does not mention the package, so the linkage between the published package and its source repository is not clearly demonstrated.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version 3.* | — | — |
league/flysystem Version ^3.0 | — | — |
nikic/fast-route Version ^1.0 | — | — |
intervention/image Version ^2.0 | — | — |
league/flysystem-aws-s3-v3 Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.