benconda/php-pdfium
The README, tests, and release notes make the current behavior reasonably transparent. Native FFI and libvips dependencies raise integration cost, while the lone maintainer and absent security policy limit resilience.
58%
Total Score
50
50
79
75
Health Score Breakdown
The package depends on PHP FFI and jcupitt/vips in addition to PHP, creating native-library and environment requirements for consumers. These dependencies fit the package's PDF rendering purpose but increase adoption and maintenance complexity.
The package is about 16 months old but has only three releases, with one release in the last 12 months and a median interval of about five months. This indicates a slow development pace for an experimental project.
There were zero commits and zero active maintainers in the last three months, indicating a current maintenance pause. The recent release partly offsets this, but does not establish ongoing activity.
The repository uses Make and Composer, but no security scanning tools were detected. Build tooling is present, while the missing scanning layer is a modest transparency gap.
The repository has no security policy. For a package using native PDFium and FFI, this leaves vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Benoit Condaminet |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jcupitt/vips Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.