asarmiento/friendly-fpdf

Usable with caveats: the release is licensed, documented, tested, stable, and backed by a non-archived repository. However, there have been no releases in about 15 months and no repository commits in the last 3 months, while security-policy and scanning coverage is absent.

Latest 2.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only four releases have been published since December 2024, and there has been no release in about 15 months. That weakens confidence in ongoing maintenance, although the package is still relatively young.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, which is the strongest evidence of slowing maintenance and raises abandonment risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but this provides little supporting evidence of broad usage or review.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces transparency around ongoing repository hygiene.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is not by itself evidence that the package is unsafe.