wyrihaximus/staticmap
The source includes tests, a matching README, and release notes for this version. Recent commit activity is absent, while both workflows use broad write permissions and unpinned actions; no security policy is published.
69%
Total Score
83
50
83
63
Health Score Breakdown
Eight runtime dependencies, including asynchronous HTTP and image libraries, create a meaningful dependency surface, but the profile is coherent with the package's stated implementation.
Post-install and post-update Composer scripts run during dependency operations, adding execution surface for consumers even though the signal does not show malicious behavior.
The package is mature, with releases since 2013, but only one release occurred in the last 12 months. This suggests a slower current cadence without proving abandonment.
No commits and no active maintainers were recorded in the last three months. This is a concrete maintenance concern, though recent release and pull-request evidence provides partial compensation.
The project uses Composer and Make, but no security-scanning tooling was detected. This is a modest transparency and assurance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cees-Jan Kiewiet |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/http Version ^1.11 | — | — |
react/stream Version ^1.4 | — | — |
react/promise Version ^3.3 | — | — |
imagine/imagine Version ^1.5.0 | — | — |
react/event-loop Version ^1.5 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.