contributte/pdf

Usable with caveats: this is a licensed, tested, organization-backed package with a real release and no deprecation or workflow red flags. However, it has had no commits from active maintainers in the last three months, and its workflows lack explicit token permissions and security scanning.

Latest v8.0.0

Packagist

74%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has existed since 2013 with 26 releases, but only one release appeared in the last 12 months, indicating a slower recent cadence than its historical median of about 74 days.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may currently be paused despite the recent v8.0.0 release.

Repo issue activity

There are no open issues and only one open pull request, but no issues or pull requests were merged during the last month, providing limited evidence of current responsiveness.

Repo tooling

Composer, Make, and four CI workflows are present, but no security scanning tools were detected, leaving a modest security-hygiene gap.

Token permissions

All four workflows omit top-level GitHub Actions token permissions, so their permissions are less explicit than recommended even though none declares top-level write access.