Package Health/burdapraha/oc_invoice_pdf

burdapraha/oc_invoice_pdf

The package has clear installation documentation, matching MIT licensing, and a small, identifiable artifact. Its source project has seen no commits for nearly eight years and no registry release for over nine years, with no security policy or scanning; organization backing and an unarchived repository only partly offset that risk.

Latest 1.0.3

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published over nine years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment for a package intended to support a production integration.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No newer activity is provided to offset the maintenance concern.

Repo popularity

The repository has zero stars, two forks, and one watcher, indicating a very small visible user base. Popularity is supporting evidence rather than a verdict, so this adds only limited concern.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning reduces assurance, although it is not by itself evidence of unsafe code.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a package used in an application stack.