Healthy and suitable to use, with a clear repository, frequent releases, tests, and recent activity. Review the lack of a license and reliance on a single active contributor before adopting it for a critical project.
78%
Total Score
60
50
83
90
The package has five runtime dependencies, including PDF, storage, and email services; this is a meaningful dependency surface but not excessive for the documented framework-helper functionality.
No license declaration or license file was found in the package or repository, leaving the legal terms for reuse unclear.
Only one registry account has publish access, which is a modest publishing continuity concern, though the linked repository shows the same apparent project owner and active releases.
The package is backed by a matching personal repository rather than an organization, so the single-contributor and single-publisher risks are not mitigated by organizational handoff capacity.
All recent commits come from one contributor, so maintenance could be disrupted if that person becomes unavailable; the active release cadence partly offsets but does not remove this risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dompdf/dompdf Version ^3.0 | — | — |
sendgrid/sendgrid Version ^8.1 | — | — |
google/cloud-storage Version ^2.3 | — | — |
shuchkin/simplexlsxgen Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.