The project is actively released and maintained, with nine releases in the last year and 35 recent commits. Recent work is concentrated in one contributor, while the repository has a security policy and no audited workflow findings.
73%
Total Score
83
100
94
83
The manifest declares MIT, but the artifact contains GPL-3.0 license text, creating a material licensing mismatch that should be resolved before adoption.
One contributor made about 94% of the 35 recent commits, leaving maintenance dependent on a very small contributor base.
The single workflow was fully audited with no findings or untrusted checkouts, but it uses top-level write permissions and its one action is unpinned, which are minor hygiene weaknesses.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8.2 | — | — |
mpdf/qrcode Version ^1.2 | — | — |
halaxa/json-machine Version ^1.2 | — | — |
phpmailer/phpmailer Version ^6.9.1 | — | — |
phpseclib/phpseclib Version ~3.0.36 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.