baklysystems/laravel-dompdf

Release historydanger

The package has had 30 releases since March 2019, but none in nearly five years; the latest release was September 2021. This is substantial evidence of staleness for a framework integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo popularitycaution

The repository has only 2 stars and 1 fork, providing little independent evidence of adoption or community support. Popularity is supporting evidence, so this reinforces but does not establish the maintenance concern.

Security policycaution

The repository has no security policy file, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though not a severe risk by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, both action references are unpinned, which is a supply-chain hygiene weakness, while the lack of a top-level permissions block is acceptable on its own.