Usable with caveats: it is a small, clearly identified MIT package with tests in its repository, but it has had no release or commit activity since February 2023. The lack of security policy and scanning further limits maintenance transparency.
52%
Total Score
33
50
78
90
The repository recorded zero commits and zero active maintainers during the last 3 months, a strong sign that fixes and dependency updates may not be receiving attention.
Nine runtime dependencies, including Hyperf components, image processing, and required PHP extensions, create meaningful compatibility and update surface for a package that has not released since 2023.
The registry namespace and repository owner match, and the project is backed by the named individual rather than an organization. This is coherent ownership evidence, though it provides less institutional continuity.
Only one release exists, published about 3 years 7 months ago, with no releases in the last 12 months. That makes compatibility and ongoing maintenance uncertain.
There are no new or closed issues in the last month and one open pull request, offering little evidence of active project maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version 2.2.* | — | — |
hyperf/cache Version 2.2.* | — | — |
hyperf/framework Version 2.2.* | — | — |
hyperf/validation Version 2.2.* | — | — |
intervention/image Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.